one

test.yaml

mapping:
 version: "RAX-1"
 rules:
 - local:
    faws:
       groups:
           multiValue: true
           value: "{Ats(http://schemas.xmlsoap.org/claims/Group)}"
    user:
       domain: "797028"
       name: "{D}"
       email: "{At(http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress)}"
       expire: "PT4H"
       roles:
        - "{0}"
   remote:
     - path: |
        (
            if (mapping:get-attributes('http://schemas.xmlsoap.org/claims/Group')='GG_AWS_Admins') then ('nova:admin', 'ticketing:admin', 'monitori
ng:admin', 'cloudbackup:admin') else ()
        )
       multiValue: true