Testing whole B2B story with multiple sub organizations

[HiranyaKavishani]

Description

$Subject using IS-7.1.0-m5 federated IDP

Version

No response

[HiranyaKavishani]

Update

Observed below issues

1. Logout function is not properly working in suborgs (Logout functionality fails for sub organizations when using IS as federated IDP in APIM  product-is#21927)

2. User groups in a sub org doesn't populate to APIM for login sub org user (This needs if we enable application sharing with org support) Due to : Remove groups from provisioning as user attributes carbon-identity-framework#3732

3. When the sub org user does have multiple roles, those are not populated correctly in API-Manager side
   Root cause : The fix [1] is not available in APIM 4.4.0 pack (Need to add this to patch queue)
   [1] https://github.com/wso2-support/identity-outbound-auth-oidc/pull/16/files
   But eventhough this fix is there, when the IDP is configured with userInfo endpoint, "internal/" keyword is appended when the user has more than one roles

4. When the users are residing on several sub orgs and trying login in to APIM, noticed some conflicts and several errors intermitently

Currently communicate with IS team and figuring out these issues.