# Example: setting up custom mapping for OneLogin This example shows how to configure user roles after you have [configured OneLogin SSO for Snyk](https://docs.snyk.io/snyk-platform-administration/single-sign-on-sso-for-authentication-to-snyk/set-up-snyk-single-sign-on-sso). OneLogin has the concept of groups and roles. However, OneLogin does not support the assignment of multiple groups to a user. Therefore, roles will be assigned to users directly instead of indirectly through groups. 1. In OneLogin, go to the **Users** and then to the **Roles** section and create the roles following the naming convention outlined for [custom mapping](https://docs.snyk.io/snyk-platform-administration/single-sign-on-sso-for-authentication-to-snyk/custom-mapping). Each role should have the Snyk SAML app enabled as the role app.\ Assign the users to their roles as needed.

2. To transfer the user roles in the SAML assertion to Snyk, go to **Applications**, select the Snyk SAML app, and select the **Parameters** section on the left.\\

3. Create a **new parameter** named **roles**, with both checkboxes **Include in SAML assertion** and **Multi-value parameter** checked. **Save.**\\ 4. On the next screen, select **User Roles** as the **default value** and **Semicolon Delimited Output (Multi-value output).**\ Ensure that the checkbox **Include in SAML assertion** is checked. **Save**.\\