External identify provdier (idP) - Initiate authentication and roles

Check out this thread... [FEATURE-1402] Perspective "autologin" IdP

Client Roles only apply to User Sources. Also, AFAIK, the "Required Roles Setting" only applies to Vision Clients... its really in the wrong section of the Project Properties, but has been in that spot for ~10 years...

For Perspective, you want Perspective > Permissions in the project properties. That will control login to Perspective.