Changing role types?

I'm setting up custom authenticating using `aad` to get custom branding (would be nice to have that ability in the built in `aad` support 😊).

And mostly it's working great, however I'm running into problems when I need to get the users roles.

I've created an api function that looks through the user claims and grabs the roles from there.

Sometimes the roles are in the claims with the `typ` set to `http://schemas.microsoft.com/ws/2008/06/identity/claims/role`, but sometimes the `typ` is `roles`.

I'm wondering why this isn't stable?