From the Roler per service provider section of the main OwnIdP menu, you can manage which roles are linked to service providers. Here you can link roles to each service provider defined in the Identity Broker. If no roles are linked to a specific service provider, the service provider will accept all roles by default.