Claims in access token for OpenID Connect

Questions OAuth/OIDC
4

Of course. The first link in the provided answer walks you through setting up groups or a custom scope with Okta via the API. If you’d like to use the UI to set this up:

Note: This requires the Classic UI. You can toggle the view by looking for the gear icon on the upper left of your admin view.

  1. Navigate over to your app in Okta
    • Click on the Sign On tab
  2. Under OpenID Connect ID Token, click on Edit
    • Change the Group claim filter to Regex with the value .*

This will allow return User groups when the groups scope is requested during authorization.

For adding custom scopes, you can use the Developer Console.

  1. Navigate to API > Authorization Servers
  2. Click on the Scopes tab
  3. Select Add Scope

Similar to groups, you need to request this custom scope during authorization for it to appear in the tokens.

For adding custom claims:

  1. Navigate to API > Authorization Servers
  2. Click on the Claims tab
  3. Select Add Claim

Does that make sense?

2 Likes