Assign custom roles with a function and Azure AD v2.0

[MrMossevig]

Hi,

We want to use a cusom function to assign roles to our users. We've been following this tutorial. The tutorial is using Azure AD v1.0 (which is very eay to miss BTW, and cost us a couple of hours of debugging). When we moved to Azure AD 1.0 it worked fine, but ideally we would use Azure AD 2.0.

Has anyone implemented a custom rolesSource with Azure AD v2.0?
We tried the following configuration, which should be correct, but the sign-in got stuck in a loop that ultimately failed:

  "auth": {
    "rolesSource": "/api/customRoles/GetRoles",
    "identityProviders": {
      "azureActiveDirectory": {
      "registration": {
          "openIdIssuer": "https://login.microsoftonline.com/xxX_tenant_ID_xxx/v2.0",
          "clientIdSettingName": "AZURE_CLIENT_ID",
          "clientSecretSettingName": "AZURE_CLIENT_SECRET"
      },
      "login": {
          "loginParameters": [
              "scope=User.Read"
          ]
        }
      }
    }
  }

We've tried several different scopes, such as scope=https://graph.microsoft.com/User.Read and scope=https://graph.microsoft.com/.default but to no avail.