code: @Override
      protected List getUserRoles(final DirContext dirContext, final String username)
              throws LoginException, NamingException
      {
          if (_ignoreRoles) {
              ArrayList<String> strings = new ArrayList<>();
              addSupplementalRoles(strings);
              return strings;
          } else {
              return super.getUserRoles(dirContext, username);
          }
      }
docs: Override to perform behavior of "ignoreRoles" option
  
  @param dirContext context
  @param username   username
  
  @return empty or supplemental roles list only if "ignoreRoles" is true, otherwise performs normal LDAP lookup
  
  @throws LoginException
  @throws NamingException