Maurizio Valenzisi

I had the same issue and I solved it using `--oidc-email-claim=sub`. However, it fails to refresh the cookie with the following error: ``` [2021/04/13 14:18:33] [stored_session.go:122] Refreshing 1h4m44.989096937s old session...

This is still an issue.

@JoelSpeed we tried version 7.4.0, unfortunately we hit this other issue https://github.com/oauth2-proxy/oauth2-proxy/issues/1666

This is still an issue.

I get the same behavior with both `'admissions.enforcer/disabled': 'true'` and `'admissions.enforcer/disabled': 'false'`.

No, there are no restarts.

I can confirm that `v1.12.1-rc.1` fixes the issue.

The problem is that I also wouldn't know how to reproduce the problem from scratch. The only thing that I know is that one user was missing the groups after...

I don't see any particular change from version 189.v2da14dccdb43 that could cause the problem (https://github.com/jenkinsci/azure-ad-plugin/compare/189.v2da14dccdb43...191.vfc8019068670), except for the `matrix-auth` plugin (https://github.com/jenkinsci/matrix-auth-plugin/compare/matrix-auth-3.0...matrix-auth-3.0.1)