Are the roles also correctly set in the db if SyncUser OnLogin or UpdateUserOnLogin are enabled?