public String getGroupsClaimType() throws GuacamoleException {
        return environment.getProperty(OPENID_GROUPS_CLAIM_TYPE, DEFAULT_GROUPS_CLAIM_TYPE);
    }
Returns the claim type which contains the authenticated user's groups
within any valid JWT, as configured with guacamole.properties. By
default, this will be "groups".

@return
    The claim type which contains the authenticated user's groups
    within any valid JWT, as configured with guacamole.properties.

@throws GuacamoleException
    If guacamole.properties cannot be parsed.
extensions/guacamole-auth-sso/modules/guacamole-auth-sso-openid/src/main/java/org/apache/guacamole/auth/openid/conf/ConfigurationService.java