Hello

I am converting an Umbraco 7 site to Umbraco 10. It uses a CRM for membership login including providing the roles they belong to. In the CMS, the typical public access settings are used to lock down pages to those same CRM roles set up as equivalent member groups. In the umbraco 7 site, authentication was achieved with a Custom RoleProvider to obtain the roles from the CRM, and Umbraco did the rest.

How do I achieve the same thing in Umbraco 10 / net core? Using the following seems to achieve the login part (where UserID is a unique id from the CRM already verified by a login workflow not included here):

//https://our.umbraco.com/documentation/reference/querying/IMemberManager/
 var memberIdentityUser = new MemberIdentityUser() {
    UserName = authResult.UserID,                           
};
 await _memberSignInManager.SignInAsync(memberIdentityUser, false);

however, the missing piece of the puzzle is the roles. Do they need to be added as claims somehow? I tried the following but it doesn’t work:

foreach (var crmRole in authResult.RoleGroups)
    memberIdentityUser.AddRole(crmRole.RoleGroupName);

Is the only option to explore auto-linking? https://our.umbraco.com/documentation/reference/security/auto-linking/ That seems to still want a member record in Umbraco. Ideally that’s not what I want to do at all.

Thanks for any insight

Andrew