Comma separated list of mappings that specify client http values that should be added as role principals after successful authentication.