Roles claim missing from the access token

Question

Have registered an app for SSO to web app. Created App roles for the app. Assigned users to groups and assigned groups to the app roles. The access tokens of the authenticated users do not show the roles claim. There are no groups or roles claim in the access token. Have been banging my head since several days now but this shit doesn't seem to budge. Went through all similar questions but nothing has helped so far. Seeking out the community for help.

Answer 1

We have had a similar issue, be aware of a possible conflicting configuration that can cause this.

https://stackoverflow.com/a/76322800/1020139

Answer 2

As @Niels Rossen suggested, emit_as_roles for the optional groups claim was the culprit. It prevented the app roles from appearing in the token. After removing the optional groups claim entirely, I could see the app roles coming up under the roles claim in the token. Thanks a ton to @Niels Rossen