My mapping looks like this:

    {
        "local": [
            {
                "user": {
                    "name": "{0}",
                    "email": "{1}"
                }
            },
            {
                "projects": [
                    {
                        "name": "IT",
                        "roles": [
                            {
                                "name": "member"
                            }
                        ]
                    }
                ]
            }
        ],
        "remote": [
            {
                "type": "OIDC-preferred_username"
            },
            {
                "type": "OIDC-email"
            },
            {
                "type": "OIDC-group-membership",
                "any_one_of": [
                    "sysadm"
                ],
                "regex": true
            }
        ]
    },