I successfully integrated Microsoft Login Connector into my application, and while authentication is now functioning as intended, I am still struggling to comprehend the authorization process and how to give users access to OutSystems application-specific roles.

For instance, the IDP component creates user groups in the OutSystems user application that correspond to the Azure security group. After that, we may manually assign roles to the OutSystems user groups to give users access to roles related to the application.

How does the Microsoft Login Connector component's authorization process operate then?