JWT Groups Filter (per route)

Pomerium Enterprise

This setting is available only in Pomerium Enterprise.

Summary

The JWT Groups Filter (per route) setting allows you to reduce the size of the groups claim in the Pomerium JWT. See the global JWT Groups Filter reference page for more information about this feature.

When the global setting is enabled, the per-route option will expand the set of allowed groups. A group will be eligible for inclusion in the groups claim if is allowed by either the global setting or the per-route setting.

When the global setting is not enabled, the per-route option will enable groups filtering for a specific route.

How to configure

The JWT Groups Filter setting is available in the Enterprise Console on the route settings page, under the "Headers" tab.