When using an ext-jwt-signer and the identity is assigned to anything other than the default auth policy it seems like ext-jwt-auth cannot succeed.
Relevant context at:
https://openziti.discourse.group/t/session-not-authorized-or-credentials-invalid/5183/14