Add Keycloak compat by using first element of role

This MR checks if role value returned is an array. If so, plugin uses the first element of this array.

This improves Keycloak compatibility as if Multivalued is set to false in Mappers, return value will still be an array.

Merge request reports