The "wlcg/test group grants full access to /protected area" test requires that the user is able to obtain a token with wlcg.groups claim containing /wlcg/test group. In other words, that the user is a member of the /wlcg/test group in the WLCG IAM instance.
People are not a member by default, and must somehow join this group.
This requirement and how to satisfy it should be documented in the README file somewhere.
federicaagostini
commented
2 years ago
The "wlcg/test group grants full access to /protected area" test requires that the user is able to obtain a token with
wlcg.groupsclaim containing/wlcg/testgroup. In other words, that the user is a member of the/wlcg/testgroup in the WLCG IAM instance.People are not a member by default, and must somehow join this group.
This requirement and how to satisfy it should be documented in the README file somewhere.