code: func (a *AuthServer) buildOIDCRoles(connector services.OIDCConnector, claims jose.Claims) ([]string, error) {
  	roles := connector.MapClaims(claims)
  	if len(roles) == 0 {
  		return nil, trace.AccessDenied("unable to map claims to role for connector: %v", connector.GetName())
  	}
  
  	return roles, nil
  }
docs: // buildOIDCRoles takes a connector and claims and returns a slice of roles.