{"action":"created","issue":{"url":"https://api.github.com/repos/AzureADSamples/SinglePageApp-WebAPI-AngularJS-DotNet/issues/7","labels_url":"https://api.github.com/repos/AzureADSamples/SinglePageApp-WebAPI-AngularJS-DotNet/issues/7/labels{/name}","comments_url":"https://api.github.com/repos/AzureADSamples/SinglePageApp-WebAPI-AngularJS-DotNet/issues/7/comments","events_url":"https://api.github.com/repos/AzureADSamples/SinglePageApp-WebAPI-AngularJS-DotNet/issues/7/events","html_url":"https://github.com/AzureADSamples/SinglePageApp-WebAPI-AngularJS-DotNet/issues/7","id":95940747,"number":7,"title":"Group claims are not in the jwt token","user":{"login":"wvdd007","id":2393236,"avatar_url":"https://avatars.githubusercontent.com/u/2393236?v=3","gravatar_id":"","url":"https://api.github.com/users/wvdd007","html_url":"https://github.com/wvdd007","followers_url":"https://api.github.com/users/wvdd007/followers","following_url":"https://api.github.com/users/wvdd007/following{/other_user}","gists_url":"https://api.github.com/users/wvdd007/gists{/gist_id}","starred_url":"https://api.github.com/users/wvdd007/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wvdd007/subscriptions","organizations_url":"https://api.github.com/users/wvdd007/orgs","repos_url":"https://api.github.com/users/wvdd007/repos","events_url":"https://api.github.com/users/wvdd007/events{/privacy}","received_events_url":"https://api.github.com/users/wvdd007/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-07-19T19:08:26Z","updated_at":"2015-07-30T17:44:40Z","closed_at":null,"body":"Hello.  I was able to run this demo in no time thanks to the walkthrough.  Is there something special being done with \"group\" claims for these kinds of applications ?  For the same user and the application \"webapp-groupclaims-dotnet\" (another of your samples), I do get the group claim in the principal; while here I don't seem to receive it.  Do you have any idea of what I am doing wrong ?  (I altered the manifest files of bot the api and the app to have \r\n  \"groupMembershipClaims\": \"All\".)"},"comment":{"url":"https://api.github.com/repos/AzureADSamples/SinglePageApp-WebAPI-AngularJS-DotNet/issues/comments/126414726","html_url":"https://github.com/AzureADSamples/SinglePageApp-WebAPI-AngularJS-DotNet/issues/7#issuecomment-126414726","issue_url":"https://api.github.com/repos/AzureADSamples/SinglePageApp-WebAPI-AngularJS-DotNet/issues/7","id":126414726,"user":{"login":"dstrockis","id":1951260,"avatar_url":"https://avatars.githubusercontent.com/u/1951260?v=3","gravatar_id":"","url":"https://api.github.com/users/dstrockis","html_url":"https://github.com/dstrockis","followers_url":"https://api.github.com/users/dstrockis/followers","following_url":"https://api.github.com/users/dstrockis/following{/other_user}","gists_url":"https://api.github.com/users/dstrockis/gists{/gist_id}","starred_url":"https://api.github.com/users/dstrockis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dstrockis/subscriptions","organizations_url":"https://api.github.com/users/dstrockis/orgs","repos_url":"https://api.github.com/users/dstrockis/repos","events_url":"https://api.github.com/users/dstrockis/events{/privacy}","received_events_url":"https://api.github.com/users/dstrockis/received_events","type":"User","site_admin":false},"created_at":"2015-07-30T17:44:40Z","updated_at":"2015-07-30T17:44:40Z","body":"Are both of those applications single page apps?\r\n\r\nRegardless, we do have a bug open right now on this topic.  It affects architectures where a single web API accepts access tokens from both SPA's and other types of clients, and expects group claims (or the overage claim) to exist in the token.  Is that what you're trying to accomplish?"}}