/externallogin.html false ROLE_USER ROLE_ADMIN_EXTERNAL_ORGANIZATION ROLE_ADMINISTRATOR additional custom sso parameters go here