Passing roles/groups in SAMLResponse attributes and signing both message and assertion

I have a couple of questions.

• When using casdoor as an IdP, are the only attributes that are available in the SAMLResponse email, displayName, and name? Can I pass roles or groups?
• Looking at a response, I see that the assertion message is signed, but not the message assertion I should file a bug for that? Or a feature request? Basically, I have an app that wants both to be signed

send a github issue

Thanks @hsluoyz , assuming for just the latter one? For the first question, are those the only available attributes? The app also wants a group to associate authorizations to its own groups

read the code by yourself, the code is just there