The Account Console SAML SSO docs mention that the admin role must be specified in the identity provider response. However it's not clear which attribute to use for passing role info via SAML.

What SAML attribute should the role be assigned to? What does the value of the attribute need to be?