Unable to retrieve group information on my userinfo call. I’ve read all the pertinent community messages in this forum and verified all recommendations, but to no avail.
I have a group created and one user assigned to it:
It looks like the groups claim you configured on your custom authorization server is set to be included int he Access Token ('Include in token type"). That would explain why you are not seeing it when you preview tokens with the openid scope, because the payload you are looking at is for the id_token, not the access token. If you switch the the tab labelled ‘token’, do you see your claim once more?
If you want the claim to appear at the userinfo endpoint, change the “Include in token type” option to ID Token.
PS, that right now you do not need to request that groups scope NOR the settings on the Application → Sign On tag. When using a custom AS (like Default) to get tokens, then you only need to configure the claim at the authorization server level, not at the application level. As for the groups scope, this is only required when using the Org Authorization Server (which is when those settings on the Applcation → Sign On tab come into play). The groups claim you created is currently set to be included for Any scope, so if you do want to use the groups scope you created so that its only included when requested, you would need to set the “Include in” option to the groups scope.
