AARC-G069: "Group and role membership information is released through the entitlements claim (instead of eduperson_entitlement) in the case of OpenID Connect relying parties."
entitlements
eduperson_entitlement
See PR #519