@Test
public void shouldAllowIncorrectAudienceIfNoAllowedAudiencesConfigured() {

  var configurationWithNoAllowedAudiences = AuthenticatorConfigurationBuilder.from(CONFIGURATION)
      .allowedAudiences(Set.of())
      .build();
  validator = new Authenticator(verifier, cloudResourceManager, iam, configurationWithNoAllowedAudiences);
  idTokenPayload.setAudience("https://foo.example.net");
  idTokenPayload.setEmail("foo@foo.iam.gserviceaccount.com");
  assertThat(validator.authenticate("token"), is(idToken));
}