wso2is - How to define list of user claims for OIDC /userinfo request -
I have a custom userstore manager who is running as a secondary user archive in the WSO2 identity server 5.0.0. It works perfectly to authenticate users when using it with OpenID Connect authentication, / userinfo? In response to the request Schema = openid
, the required claims are not returned to the customer. Logging in the Custom Userstore Manager shows that the method getUserPropertyValues () applies with the names of the following claims:
["postalcode", "mail", "locality name" Reaction for "SN", "CN", "Code" / userinfo
actually returns, "Rick-name", "telephone number", "gender", "given name", "url" , "Country"]
claims only from that list, it is not possible to return the other claims.
What I do not understand is from where this list comes from. Configure claim mapping for "" defines "postcode" for example "default = supported by false" and "required = false". So I hope this list is not in it. On the other hand, the claim "sub" (or mapped for name: "UID") is not in the list, but its definition is quote ""
- Claims Uri: Sub <
- Mapped attribute: UID
- supported by default: true
- Required: true
its Apart from "All" is an essential claim by definition of OIDC Spacey (see).
Where can the list of claims be defined which should be returned by userinfo? Schema = openid A Successful User?
By adding user interface, we receive user attribute values for the claims listed under bids.
We claim Yuri in the claim configuration and have special features (primary and default value for secondary user stores) in user store. The former: and its map feature is UID
If the secondary user collection does not support this default attribute value, then we have to configure it under the mapped attribute. Ex:
secondary user store domain = SECONDARY_ supported attribute value next = configuration for the mapped character = uid; SECONDARY_ / subject
You will now receive
The following configuration is used in admin console profile management
supported by default = in the console The attribute is available to edit by default required = true This attribute should be entered when you update the user profile.
Comments
Post a Comment