Comment 5 for bug 1555629

Thanks for the pointer.

I understand (and half-expected) that the list of all users would be limited when using domain-specific identity backend would be somehow limited.

There is a discrepancy though between what the doc says and what I've seen, namely the list of all groups (projects) is still available, while it should have the same behaviour that user according to the doc. This may be a bug ?

As for the authentication failure as the token is not domain scoped I think it make sense, even if the admin_token may have another kind of error than 401, authorisation failure, what do you think ?