OptionalgroupsThe name of the claim in the user profile that contains group information. This value is read from the authenticated user's session.
OptionalmatchDetermines how multiple groups are evaluated. When true, the user must belong to all specified groups for authorization to succeed. Otherwise, membership in any one group is sufficient.
Configuration options for evaluating user group membership.