title: Identity Server 4 + ExpressJS+ Windows Auth = 431
body: <p>I'm trying to implement OpenId Connect with Identity Server 4 using Windows Authentication like in <a href="https://docs.identityserver.io/en/latest/topics/windows.html" rel="nofollow noreferrer">docs</a>. The issue is that i have too many groups that i want to get in client application that uses express-oidc-connect. The issue is that after logging in IDP 431 error appears. Looks like <code>idsrv.externalC*</code> cookies are trying to fit hundreds of groups. I know that there is special route called UserInfo but i do not understand how to move group claims to that route and remove them from token. How can i achieve getting groups from Windows Authentication in client application via OpenId Connect?</p>