问用户声称asp.net mvc中的Azure

EN

public void ConfigureAuth(IAppBuilder app)
        {
            app.SetDefaultSignInAsAuthenticationType(CookieAuthenticationDefaults.AuthenticationType);

            app.UseKentorOwinCookieSaver();
            app.UseCookieAuthentication(new CookieAuthenticationOptions
            {
                CookieSecure = CookieSecureOption.Always,
                ExpireTimeSpan = System.TimeSpan.FromMinutes(15),
                SlidingExpiration = true,
                CookieHttpOnly = true
            });

            app.UseOpenIdConnectAuthentication(
                new OpenIdConnectAuthenticationOptions
                {
                    ClientId = clientId,
                    Authority = authority,
                    PostLogoutRedirectUri = postLogoutRedirectUri,

                    Notifications = new OpenIdConnectAuthenticationNotifications
                    {
                        AuthorizationCodeReceived = context =>
                        {
                            if(context.AuthenticationTicket.Identity.Claims.Any(x => x.Type == "groups" && x.Value == "587642-sff4-f4c0-8085-ssdfe45d87ed"))
                            {
                                context.AuthenticationTicket.Identity.AddClaim(new Claim("roles","Admin"));
                            }
                            else
                            {
                                context.AuthenticationTicket.Identity.AddClaim(new Claim("roles", "User"));
                            }

                            return Task.FromResult(0);
                        }
                    }
                });
        }