diff --git a/pac4j-module/src/main/java/net/unicon/shibui/pac4j/BetterSAML2Profile.java b/pac4j-module/src/main/java/net/unicon/shibui/pac4j/BetterSAML2Profile.java
index bbe33694c..ea4d4f8f4 100644
--- a/pac4j-module/src/main/java/net/unicon/shibui/pac4j/BetterSAML2Profile.java
+++ b/pac4j-module/src/main/java/net/unicon/shibui/pac4j/BetterSAML2Profile.java
@@ -4,6 +4,7 @@
 import org.pac4j.saml.profile.SAML2Profile;
 
 import java.util.Collection;
+import java.util.HashSet;
 import java.util.List;
 import java.util.Set;
 
@@ -41,7 +42,8 @@ public List<String> getGroups() {
     }
 
     public Set<String> getRoles() {
-        return (Set<String>) getAttribute(profileMapping.getRoles());
+        Set<String> result = (Set<String>) getAttribute(profileMapping.getRoles());
+        return result == null ? new HashSet<>() : result;
     }
 
     @Override
diff --git a/testbed/authentication/reverse-proxy/.gitkeep b/testbed/authentication/reverse-proxy/.gitkeep
new file mode 100644
index 000000000..e69de29bb
diff --git a/testbed/authentication/reverse-proxy/certs/.gitkeep b/testbed/authentication/reverse-proxy/certs/.gitkeep
new file mode 100644
index 000000000..e69de29bb