AzureAD authentication: org_mapping configuration is ignored

### What happened? I configure the AzureAD authentication. All my config is done via env variables. My groups are successfully retrieved by Grafana, I'm seeing it in the logs. I configure the org_mapping attribute to assign the appropriate role depending on the Entra group ID. Unfortunately, Grafana keeps assigning the role defined by the `auto_assign_org_role` value. ### What did you expect to happen? The role should be given by the groups to which the user is belonging. ### Did this work before? Don't know. ### How do we reproduce it? Configure Grafana to use Azure AD. I have only one organization. The following settings are set: `org_mapping` = `<group_id1>:<org_name>:Admin <group_id2>:<org_name>:Editor <group_id3>:<org_name>:Viewer` `role_attribute_strict` = `true` I can see it in the settings UI. In the logs, I can see the following messages: ``` 01 April 2025 at 15:44 (UTC+2:00) | logger=oauth.azuread t=2025-04-01T13:44:33.049054774Z level=debug msg="AzureAD OAuth: extracted role" email=[REDACTED] role= | grafana 01 April 2025 at 15:44 (UTC+2:00) | logger=oauth.azuread t=2025-04-01T13:44:33.049043918Z level=debug msg="AzureAD OAuth: extracted groups" email=[REDACTED] groups="[<group_id1> ...]" | grafana -- | -- | -- 01 April 2025 at 15:44 (UTC+2:00) | logger=oauth.azuread t=2025-04-01T13:44:33.049071224Z level=debug msg="AzureAD OAuth: mapped org roles" email=[REDACTED] roles=map[1:Viewer] ``` ### Is the bug inside a dashboard panel? No ### Environment (with versions)? Grafana: 11.6.0 OS: Default docker image Browser: ### Grafana platform? Docker ### Datasource(s)? _No response_