Major Description
The following identity assertion configuration does not result in a GroupPrincipal being added to the Subject:
<provider>
<role>identity-assertion</role>
<name>Default</name>
<enabled>true</enabled>
<param>
<name>group.principal.mapping</name>
<value>*=users</value>
</param>
</provider>
Fix issue and provide unit test coverage for wildcards.