When logging in via touchstone, all users seem to get the same role: “Authenticated User”. I’ve created a site-specific role with limited permissions and I want to give it to users who can log in. I’ve setup a Shibboleth whitelist and put a kerb name on it. When this user logs in, I want to give them my newly created role. How do I accomplish this.