Hi,
Do you want to provide more details on "receive roles based on local policy"?
With the 1.4 version, you can authenticate via the LDAP and also use the group membership of the user to assign the role. You can choose the group to role mapping on the UCSM.
./Abhinav