title: Azure AD OpenID connection - groups not shown in token
body: <p>We would like to connect our Angular frontend application to Azure AD. We started testing this with the following example project: <a href="https://blogs.msdn.microsoft.com/premier_developer/2018/10/24/using-adal-js-with-angular4/#" rel="nofollow noreferrer">https://blogs.msdn.microsoft.com/premier_developer/2018/10/24/using-adal-js-with-angular4/#</a></p>
  
  <p>In the ‘app.module.ts’, we have provided the Azure AD config like below.</p>
  
  <pre><code>{
    provide: APP_CONFIG, useValue: { 
      clientId: '&lt;our-client-id&gt;',
      tenantId: '&lt;our-app-id&gt;',
      redirectUri: 'http://localhost:4200/frameredirect',
    }
  }
  </code></pre>
  
  <p>In the Azure portal we have created the app registration and configured the redirect url to match the above. According to the information mentioned in <a href="https://docs.microsoft.com/en-us/azure/active-directory/develop/access-tokens" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/active-directory/develop/access-tokens</a> we should also configure the app manifest in Azure Portal, so that the user groups will be included in the token. So in the Minifest we hace set groupMembershipClaims to SecurityGroup. Now all organization groups should be included in the token. If there are to many roles, then we should see an endpoint where we can query the groups. Something like:</p>
  
  <pre><code>"src1" : { "endpoint" : 
  "https://graph.windows.net/{tenantID}/users/{userID}/getMemberObjects" }
  </code></pre>
  
  <p>After setting up, login works. However, the user groups are not included in the access token at all. Does anyone know what we are missing?</p>