If multiple claims values have a valid matching for ocis roles, we'll pick the ocis role that appears first in the mapping configuration.
If multiple claims values have a valid matching for ocis roles, we'll pick the ocis role that appears first in the mapping configuration.