Too large IdToken for oidc

[farodin91]

I tried to use entra with oidc but by default all groups are included which leads to cookie being larger than 4KB. Is there any workaround in envoy to fix this? oauth proxy use session store.

[farodin91]

envoyproxy/envoy#28799 Found a PR on envoy

[farodin91]

Cc @shawnh2

[zhaohuabing]

Hi @farodin91 Are all the claims and values in the token necessary? Is it possible to configure the Entra to not include all groups to make the token smaller?

[farodin91]

Not all claims are necessary but it is pretty complicated to reduce by building group filter. The group filter increases the complexity as you to probably update filter if you need another group.
Also debug is hard at moment as envoy sends a cookie which is large the 4kb and did say the it could be an issue.