kuboard配置oidc登录，groups获取不到

[CharkeyQK]

  KUBOARD_LOGIN_TYPE: "oidc"
  KUBOARD_ROOT_USER: "root"
  UPSTREAM_OIDC_ISSUER: "https://sso.server/"
  UPSTREAM_OIDC_CLIENT_ID: "kuboard"
  UPSTREAM_OIDC_CLIENT_SECRET: "client-secret"
  UPSTREAM_OIDC_REDIRECT_URI: "https://kuboard/sso/callback"

使用 Keycloak，client已经为client scopes加入了 groups；但是登录的时候，kuboard日志还是看到groups为空： msg="login successful: connector \"oidc\", username=\"devops\", preferred_username=\"devops\", email=\"devops@example.com\", groups=[]"

请问哪里配置有误

[liusancai]

请问是怎么配置oidc登录的，没有找到对应的文档