add groups claim

testserver/docker_vpnserver/templates/config.yml

@@ -26,6 +26,7 @@ auth:
       - openid
       - profile
       - email
+      - groups
     # You can optionally restrict access to users with an email address
     # that matches an allowed domain.
     # If empty or omitted then all email domains will be allowed.