Using Windows Authentication + Claims is super slow

Hey all, not sure if this is a bug or not.

Version 2026.2.0, browser Edge

I've set up my roles.ps1 file to have different claimvalues based on groupsid of different groups in active directory. So basically a PSU_Admins, PSU_Operators, PSU_Readers, and PSU_Users (basically authenticated users). All this works properly if looking at "My Identity" page and verifying roles.

My problem is that any time a user (or I'm using a different account) doesn't have an exact permissions binding, browsing is incredibly slow in apps or the admin page. I feel like it's checking the claim on each page instead of once on logon. Since my account is explicitly declared as Administrators, browsing is quite fast for me. Any account that I set up with explicit permissions is also fast, local accounts are also unaffected.

Is there anything else I can do to test or find logs?

@matthew

I built this scenario in my lab on 2026.2.0. I found that a Windows-auth user with no direct PSU role assignment, receiving their role through a group SID claim mapping, did not show a browsing speed difference compared with an admin user. More information is needed from you to help.

Could you please assemble and post (without sensitive information) a fresh PSU log set that shows both the admin user and the slower user browsing the same pages? Please clear cached claims in PSU under Security -> Roles -> Clear Cached Claims (it's a little brush icon 🧹) before doing the test.

If the results of this test are still inconclusive, the next step will be to ask for sanitized HAR files from both users.