No resource token was issued because the user has no group claims which are mapped to Active Directory Domain Services groups. ...