Can't use group claims to get the user's group

[Alexfan]

Following this article.
https://developer.okta.com/blog/2017/10/13/okta-groups-spring-security
When I tried to login, the user account and admin account all got unauthorized page. Any idea what might be wrong?

[mraible]

Did you add a groups claim to your access token as specified in the post?

[Alexfan]

I believe I do.

[mraible]

Can you try adding it to you ID token and see if that helps?

[Alexfan]

It worked! Really appreciate it!
What’s the difference between these two?
I just found my logout button doesn’t work. Any idea what happened?

[mraible]

I believe this happens because Spring Security looks in the ID token.