Details
Description
We have apps running on Tomee that we want to authenticate and authorize using MP-JWT which is generated by WebSeal. We would like to pass group claim in the MP-JWT. We want the app to authorize using the group claim which should have a mapping to roles. We don't want to use group claim directly in the @RolesAllowed annotation. We would like have a mapping defined in server configuration that maps groups to roles. Since we can have one-to-many / many-to-many relationships between groups and roles. Please let us know if we can do this in Tomee. We were able to do this with open liberty.