Add Keycloak compat by using first element of role
This MR checks if role value returned is an array. If so, plugin uses the first element of this array.
This improves Keycloak compatibility as if Multivalued is set to false in Mappers, return value will still be an array.