This sample can be can be set in the Core Authentication Service for Organization and Authentication Configuration Service for Role OR Service.
See the section Configuring the Authentication Post Processing SPI.