N10
Configurable claim mapping
Unit E1 · Verification type Test
- A mapping layer reads from configurable claim paths: subject, display name, email, groups/roles; the mapping claim value → Governator role is configurable (environment variable or M21).
- Tests demonstrate the same role assignment with a Keycloak token and an Entra ID token (recorded sample tokens).