Map groups from external IdP to project specific roles - ZITADEL