one or more incorrect role claims, yet groups are correctly extracted

[keesfluitman]

Jellyfin Log Entry

[16:00:57] [WRN] [27] Jellyfin.Plugin.SSO_Auth.Api.SSOController: OpenID user 00ae44975cbb46c2b95bc37048cb64140b8a53b79c8c2625a578a has one or more incorrect role claims: [{"Type": "sub", "Value": "00ae44975cbb46c2b969048cb64140b8a53b625a578a"}, {"Type": "acr", "Value": "goauthentik.io/providers/oauth2/default"}, {"Type": "name", "Value": "Lee LastName"}, {"Type": "given_name", "Value": "Lee Lastname"}, {"Type": "preferred_username", "Value": "lee"}, {"Type": "nickname", "Value": "lee"}, {"Type": "groups", "Value": "requesters"}, {"Type": "groups", "Value": "ipausers"}]. Expected any one of: ["requesters", "family"]

Authentik Settings

Property Mapping:

Scope is "groups"
return [group.name for group in user.ak_groups.all()]

So in my case. Authentication works. But Authorization fails. It is getting Type Value Dictionaries right? Type: groups, Value: Requesters. But I guess it's expecting a list?

Edit: Fixed.
Somehow when I changed the Provider name from Authentik to authentik, it stored it as a new Provider. Thus, when i was changing my settings for the Authentik provider, it was actually using "authentik"-provider. And thus, the changes I made did not actually have any effect. It worked when I deleted one and made the proper changes.