27 lines
829 B
YAML
27 lines
829 B
YAML
|
# Claim envelope when the token-side `groups` list has been clipped by
|
||
|
|
# the IdP. Both Microsoft Entra and Keycloak signal this differently;
|
||
|
|
# this fixture shows the Entra-style `hasgroups: true` flag. flex-auth
|
||
|
|
# sets directory.group_overage = true and depends on the directory
|
||
|
|
# resolver (FLEX-WP-0004 T05) to fetch the full set.
|
||
|
|
#
|
||
|
|
# Reference: docs/iam-profile-consumption.md §"Group Overage and
|
||
|
|
# Freshness".
|
||
|
|
|
||
|
|
iss: https://login.microsoftonline.com/00000000-0000-0000-0000-000000000000/v2.0
|
||
|
|
sub: f1c4f64e-2c0c-4cda-8c9f-9f3f8f3a2b0e
|
||
|
|
aud:
|
||
|
|
- flex-auth
|
||
|
|
exp: 4102444800
|
||
|
|
iat: 1767225600
|
||
|
|
preferred_username: ada
|
||
|
|
name: Ada Lovelace
|
||
|
|
scope: openid profile hub:read
|
||
|
|
roles:
|
||
|
|
- viewer
|
||
|
|
hasgroups: true
|
||
|
|
_claim_names:
|
||
|
|
groups: src1
|
||
|
|
_claim_sources:
|
||
|
|
src1:
|
||
|
|
endpoint: https://graph.microsoft.com/v1.0/users/f1c4f64e/getMemberObjects
|