Werk #19497: SAML: Users with no matching role mapping now receive default roles instead of empty roles

Component	Setup, site management
Title	SAML: Users with no matching role mapping now receive default roles instead of empty roles
Date	Mar 18, 2026
Level	Trivial Change
Class	Bug Fix
Compatibility	Compatible - no manual interaction needed
Checkmk versions & editions	2.6.0b1 Not yet released Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT 2.5.0b2 Not yet released Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT 2.4.0p25 Not yet released Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT 2.3.0p46 Not yet released Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT

When SAML role membership mapping was configured but the IDP-provided roles did not match any mapping, users ended up with an empty roles list. Now, if no roles can be mapped, the default user profile roles from the global settings are assigned instead.

To the list of all Werks