Create new Org Roles and Assign with SSO

Hello Creatio Friends,

I'm stuck. 

We are testing out creating additional org roles and want the users to automatically get assigned when they SSO in. One user can have multiple org roles.

We saw there’s some SSO fields already mapped to Contact like branch -> Branch, displayname -> Name and that kind of thing, but I’m stuck on figuring out how they get assigned to org role. 

I found VwSysRole that spells out all the different roles and SysUserInRole where they give individual role assignments for each user (multiple ok).

Just can’t find the gap - how they go from SSO JIT to assigned to an org role. Any chance you know?

Thanks in advance,

Israel