code: func (a *AuthServer) buildSAMLRoles(connector services.SAMLConnector, assertionInfo saml2.AssertionInfo) ([]string, error) {
  	roles := connector.MapAttributes(assertionInfo)
  	if len(roles) == 0 {
  		return nil, trace.AccessDenied("unable to map attributes to role for connector: %v", connector.GetName())
  	}
  
  	return roles, nil
  }
docs: // buildSAMLRoles takes a connector and claims and returns a slice of roles.