diff --git a/flask_appbuilder/security/manager.py b/flask_appbuilder/security/manager.py
index a25b63ae72..82423cfa4c 100644
--- a/flask_appbuilder/security/manager.py
+++ b/flask_appbuilder/security/manager.py
@@ -695,6 +695,7 @@ def get_oauth_user_info(
                 "first_name": data.get("given_name", ""),
                 "last_name": data.get("family_name", ""),
                 "email": data.get("email", ""),
+                "role_keys": data.get("groups", []),
             }
         # for Authentik
         if provider == "authentik":
diff --git a/requirements/base.txt b/requirements/base.txt
index 0e746b88ae..a7cd7822e9 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -127,7 +127,7 @@ typing-extensions==4.8.0
     # via
     #   flask-limiter
     #   limits
-werkzeug==3.0.1
+werkzeug==3.0.3
     # via
     #   flask
     #   flask-appbuilder