We are working on Sitecore 9.2 and need to implement Federated authentication with Azure AD here we will process returned claim and claims will return email ID and now based on email Id we need to check if the user exists in core db and assigned the respective role to user.

Questions here is can role mapping with Sitecore can be done with Email ID using Configuration or this needs custom Processor

We are working on Sitecore 9.2 and need to implement Federated authentication with Azure AD where we will process returned claim, which will return an email, and based on that email we need to check if the user exists in Core db and assign the respective role to user.

Question here is, can role mapping with Sitecore can be done with Email using Configuration or this needs custom Processor.