Azure JWT with property "hasgroups=true" instead of groups property object

user_2862032 0
Viewed 3104

I have an Azure Web Application with Azure Active Directory authentication (made with adal-angular);

In the application manifest i have set "groupMembershipClaims": "SecurityGroup"

The strange thing is that for some days, for just a user, it does not have the group claim in the AAD token with the list of group membership objectIds, but instead there's a property named hasgroups with value true.

Can I do something about it? For now I'm going to check if there's one property or the other and then call GraphAPI for direct group membership.

azure-active-directory azure-web-app-service
2 Answers

Please check if you are using the Authorization Code grant or the implicit grant?

The hasGroups claim is only provided in case of the implicit_grant and the number of groups provided in the groups claim is limited to 6 to as more would extend the URI fragment beyond the URL length limits. Refer to the hasGroups and groups claim's documentation in Azure Active Directory access tokens.

user_1326390
Related