# Using Azure AD OpenID Connect (OIDC) for Authentication

**URL:** <https://discourse.sensu.io/t/using-azure-ad-openid-connect-oidc-for-authentication/1819>\
**Category:** Sensu Go\
**Created:** [May 28, 2020, 2:01pm UTC](https://discourse.sensu.io/t/using-azure-ad-openid-connect-oidc-for-authentication/1819 "2020-05-28T14:01:37Z")\
**Posts on this page:** 1\
**Showing post:** 20

<div class="post-metadata">

**Author:** ![jspaleta](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.sensu.io/jspaleta/32/141_2.png) [@jspaleta](https://discourse.sensu.io/u/jspaleta)\
**Post date:** [June 15, 2020, 9:56pm UTC](https://discourse.sensu.io/t/using-azure-ad-openid-connect-oidc-for-authentication/1819/20 "2020-06-15T21:56:36Z")

</div>

@tribble3891  
Ugh… i think Azure has broken the groups\_claim array of strings expectation of OIDC in a subtle way  
it looks like Azure isnt given us a clean array of strings.  
technically its given us an array with a single string in it starting with oidc:[and ending with]  
its like Azure is trying to wrap an array in an array, which it should be using a json hash.  
Azure is doing this

```auto
  "groups": [
    "oidc:[\"70aed41c-93ef-4088-9fab-196d5d978c9e\",\"8a5d117e-bbbf-4706-ac17-81136e33d7bf\",\"608d8baf-b7d4-4fe1-a5d7-aac3b133d322\"]"
  ],

```

I would expect it to do this instead:

```auto
  "groups": ["70aed41c-93ef-4088-9fab-196d5d978c9e","8a5d117e-bbbf-4706-ac17-81136e33d7bf","608d8baf-b7d4-4fe1-a5d7-aac3b133d322"],

```

I’m not sure what to do here, what Azure is putting out right now for the groups attribute seems to break the groups\_claim expectation.

---

_[View the full topic](https://discourse.sensu.io/t/using-azure-ad-openid-connect-oidc-for-authentication/1819)._