Passing a Role ID through SSO

Hi everyone,

I'm currently working with our engineering team to pass custom role information through SSO using both SAML 2.0 and OAuth 2.0.

Our preferred approach is to pass logical role attributes such as isPartner, isCustomer, or isEmployee and transform that value on CC to the appropriate role ID. However, Gainsight has told us that role mapping during the sign-on process requires their specific Community Role IDs (for example, 12, 13, 14) rather than custom attributes.

My engineering team is hesitant to build custom logic that maps our identity provider roles directly to Gainsight-specific role IDs, as that approach does not scale well across other customer-facing systems we may integrate with in the future.

Has anyone encountered a similar challenge? If so, have you found an alternative approach for managing role assignments without relying on platform-specific role IDs being passed through SSO?

Thanks in advance for any insights.