From a2cfc2311722a4da763227327ce87d9fecd5b90d Mon Sep 17 00:00:00 2001
From: Claire Lovisa <lovisa.claire@gmail.com>
Date: Wed, 26 Aug 2026 11:37:54 +0200
Subject: [PATCH] Add missing header to identifier calls

---
 CHANGELOG.md       | 3 ++-
 docker-compose.yml | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4feabb3..93e5252 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -31,10 +31,11 @@
 - Bump construct-organization-relationships [DL-7473] [OP-3851]
 - fix duplicate van rechtswege/grote helft mandates [OP-3851]
   - IMPORTANT NOTE: Make sure first the loket migration has completed + data has flown from loket to OP
+- Add missing headers to identifier calls
 
 ### Deploy notes
 ```
-drc up -d link-adressenregister-uri frontend construct-organization-relationships
+drc up -d link-adressenregister-uri frontend construct-organization-relationships identifier
 drc restart resource migrations dispatcher
 ```
 
diff --git a/docker-compose.yml b/docker-compose.yml
index f42024f..8b4fa65 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -8,7 +8,8 @@ services:
   identifier:
     image: semtech/mu-identifier:1.10.3
     environment:
-      DEFAULT_MU_AUTH_ALLOWED_GROUPS_HEADER: '[{"variables":[],"name":"public"}]'
+      # It is INCREDIBLY important that the "clean" group is part of this config, DO NOT ADJUST unless you know EXACTLY what you're doing
+      DEFAULT_MU_AUTH_ALLOWED_GROUPS_HEADER: '[{"variables":[],"name":"clean"}, {"variables":[],"name":"public"}]'
       SESSION_COOKIE_SECURE: "on"
     labels:
       - "logging=true"