# SAML 2.0 field for affiliation roles

The Identity Provider (IdP) can pass in affiliation role information for account holders. This field works in conjunction with

- SSO field for affiliation IDs
- SSO field for affiliation emails
- SSO field for affiliation role delimiter

If you set this, the "Role delimiter character", and the required "Role mapping" fields then the person will be granted the associated roles in the institutions indicated in the affiliation roles array passed in.

For example, if the role associations passed in are 'staffmember@institution_a' and 'administrator@institution_b' and the role mapping for 'Institution staff' is 'staffmember' and for 'Institution administrator' is 'administrator', then they will be an institution staff member in institution_a and an institution administrator in institution_b.