Issue with ID token

Question

I have configured the trust between Azure and my on-premises SharePoint server using OpenID (with UPN and group claims emitted as roles). I have a security group that contains several nested groups with users. I added this group to SharePoint to grant it read access. Some users can access it properly, but others cannot. I captured the token of a user who does not have access, and I do not see the group IDs but rather this line.

"https://graph.windows.net/12345678-0939-496d-b129-198edd916feb/users/{user-object-guid}/getMemberObjects"}}

This is also API Permissions

Need your help please