title: Getting Security Groups in JWT Access Token
body: <p>I would like a JWT access_token to contain a list of security group.  From reading the documentation I attempted setting <code>"groupMembershipClaims": "All",</code> in the manifest of my application regostraton.</p>
  
  <p>The setup is that I have a azure ad domain with 2 users. Then I have 2 groups: <code>[user, admin]</code>  Each user has one of the groups assigned to it.  Each group is of type <code>security</code>.  </p>
  
  <p>I am attempting to perform the OAuth Code flow manually, by going to the url formated similar to this:</p>
  
  <p><code>https://login.microsoftonline.com/&lt;tenantid&gt;/oauth2/v2.0/authorize?client_id=&lt;application-id&gt;&amp;response_type=code&amp;redirect_uri=http://localhost:8080&amp;response_mode=query&amp;scope=offline_access%20user.read%20mail.read&amp;state=12345</code></p>
  
  <p>Then I login using the user account I setup in azure ad.  Then I use postman to submit a post request to <code>https://login.microsoftonline.com/&lt;tenant-id&gt;/oauth2/v2.0/token</code>  with parameters: </p>
  
  <ul>
  <li><code>client_id</code> = <code>&lt;client-id&gt;</code></li>
  <li><code>code</code> = code from previous login, </li>
  <li><code>redirect_uri</code> = <code>http://localhost:8080</code></li>
  <li><code>grant_type</code> = <code>authorization_code</code></li>
  <li><code>scope</code> = <code>user.read mail.read</code></li>
  </ul>
  
  <p>I get a valid response back, with an access_token.  However when I decode it there is no group claim listed at all.</p>
  
  <p>How can I get the groups listed in the token?</p>