https://cloudsandunicorns.com/tags/vcfa/Recent content in Vcfa on Clouds and UnicornsHugo -- gohugo.ioenCopyright © 2007–2026, Scott BoweThu, 23 Jul 2026 15:31:08 -0500https://cloudsandunicorns.com/2026/07/vcfa-oidc-groups-and-the-case-sensitivity-trap/Thu, 23 Jul 2026 15:31:08 -0500https://cloudsandunicorns.com/2026/07/vcfa-oidc-groups-and-the-case-sensitivity-trap/ <p>I <a href="https://williamlam.com/2025/08/vcf-automation-provider-organization-as-an-oidc-identity-provider-for-vcfa-tenant-organizations.html">federated</a> one of my VCF Automation tenant orgs to vIDB the other day. I imported the <code>labAdmins@int.sentania.net</code> group from AD, gave it Organization Owner, and figured I was done. Individual users I'd imported logged in and got their roles just fine. The group did not. Same identity provider, same login flow, and the group members landed in the org with nothing.</p> <h2 id="where-things-went-sideways">Where things went sideways</h2> <p>My first instinct was that the OIDC config on the org itself must be wrong, the scopes or the claim mapping not set up right. I went and checked, and it was fine (that's actually a separate post, because I found a different tenant with that exact problem). So the token was carrying the group. VCFA just wasn't matching it.</p>