I have a user coming in from Azure AD (following this example to start: http://sitecore.badalkotecha.com/2017/11/federated-authentication-for-sitecore-9-integrating-with-azuread.html). When I use
isPersistentUser set to
true, so the user is stored in User Manager, I don't see the associated roles that I have mapped from Azure to Sitecore, or the correct user profile information (the default one with the wallpaper, etc).
I've stepped through the user record in the external user builder's
BuildUser function (I extended my own to write a "real" username, instead of the hash one in the
DefaultExternalUserBuilder and I see the correct profile ID assigned. But, when I hit the Sitecore desktop, there's no wallpaper, so there does appear to be a disconnect somewhere.
Also, when I log in as the user, the correct permissions are being applied based on the roles assigned, so that seems to be working at least. I've tried setting the
keepSource value to both true and false, but I'm not seeing a difference either way. If the roles are functioning correctly, that's good, but of course without them actually assigned to the persistent user, I can't use the access viewer to check their permissions for any problem spots.