implementing SSO from NetSuite

Hi, we are implementing SSO from NetSuite to our IDP (KeyCloack) and we need to make the authorization and the authentication works.

The authentication is working fine without issues using OAUTH and SAML protocol, both worked perfectly.

The next step is make the authorization works, our goal here would be something like: When the user try to login in the application, the IDP will send the role name (or role ID) to netsuite and the user will be able to login without add the role in the user in NetSuite, is it possible?

If not, could you please help us teaching how to make the auhtorization works? and also teaching how the authorization works in NetSuite.

It can be using SAML or OAUTH protocol.

Thank!