fix role claim

open-webui/main.yaml

@@ -213,7 +213,7 @@ spec:
         - name: ENABLE_OAUTH_ROLE_MANAGEMENT
           value: "True"
         - name: OAUTH_ROLES_CLAIM
-          value: realm_roles
+          value: realm_access.roles
         - name: OAUTH_ALLOWED_ROLES
           value: default-roles-home
         - name: OAUTH_ADMIN_ROLES

open-webui/src/values.yaml

@@ -656,7 +656,7 @@ sso:
   roleManagement:
     # -- The claim that contains the roles (can be nested, e.g., user.roles)
     # @section -- Role management configuration
-    rolesClaim: realm_roles
+    rolesClaim: realm_access.roles
     # -- Comma-separated list of roles allowed to log in (receive open webui role user)
     # @section -- Role management configuration
     allowedRoles: "default-roles-home"