Ldap external users not getting user group roles

External users (from IDM) can log onto Satellite, but they don't seem to be getting the roles from the user group they are associated with?
The group name is the same as the one created with IDM and that mapping seems to work as I can add users via IDM and once refreshed on Satellite they appear.
Any help would be much appreciated