You need to be using a domain scoped token for the keystone to pick up the domain from the token...it looks like the token you are using is an unscoped token
You need to be using a domain scoped token for the keystone to pick up the domain from the token...it looks like the token you are using is an unscoped token