wso2is - How to define list of user claims for OIDC /userinfo request -


I have a custom userstore manager who is running as a secondary user archive in the WSO2 identity server 5.0.0. It works perfectly to authenticate users when using it with OpenID Connect authentication, / userinfo? In response to the request Schema = openid , the required claims are not returned to the customer. Logging in the Custom Userstore Manager shows that the method getUserPropertyValues ​​() applies with the names of the following claims:

  ["postalcode", "mail", "locality name" Reaction for "SN", "CN", "Code" / userinfo  actually returns, "Rick-name", "telephone number", "gender", "given name", "url" , "Country"]  

claims only from that list, it is not possible to return the other claims.

What I do not understand is from where this list comes from. Configure claim mapping for "" defines "postcode" for example "default = supported by false" and "required = false". So I hope this list is not in it. On the other hand, the claim "sub" (or mapped for name: "UID") is not in the list, but its definition is quote ""

  • Claims Uri: Sub <
  • Mapped attribute: UID
  • supported by default: true
  • Required: true

its Apart from "All" is an essential claim by definition of OIDC Spacey (see).

Where can the list of claims be defined which should be returned by userinfo? Schema = openid A Successful User?

By adding user interface, we receive user attribute values ​​for the claims listed under bids.

We claim Yuri in the claim configuration and have special features (primary and default value for secondary user stores) in user store. The former: and its map feature is UID

If the secondary user collection does not support this default attribute value, then we have to configure it under the mapped attribute. Ex:

  secondary user store domain = SECONDARY_ supported attribute value next = configuration for the mapped character = uid; SECONDARY_ / subject  

You will now receive

The following configuration is used in admin console profile management

supported by default = in the console The attribute is available to edit by default required = true This attribute should be entered when you update the user profile.


Comments

Popular posts from this blog

java - Can't add JTree to JPanel of a JInternalFrame -

javascript - data.match(var) not working it seems -

javascript - How can I pause a jQuery .each() loop, while waiting for user input? -