Missing role in the token

Dear All,

I have a problem with an Azure login. Redirect is working fine but I got a following error: "Authentication failed due to a missing role in the token"
App roles created, groups assigned to roles and Single sign-on token modified.
Can anyone tell me which is the required step for the correct token? What I shloud modify on the Azure portal App registration?

Thank you so much!
Dávid