I have a requirement to make username appear in the token as a claim like sub etc., I know this for a fact that it is not a standard, but I fail to find a way to do that. Is it even possible in Okta ?

One of my colleagues helped with a link to the list of reserved claims - Token inline hook reference | Okta Developer

you can introduce a custom claim into an access token for a custom authorization server in Okta. There you can bind it to user.login if you need it to be like that

Thanks for the reply, but I need to have it as username only, I can’t use it as it is a reserved claim and can not be added as a custom claim, trying different name other than username won’t work as the requirement is having it as username as the name of the claim.

username is a good name for the claim, as it does not intersect with any reserved claim names. And the expression for it will be user.login

[image] This is what I get while creating custom claim.

Get Username claim in access token

Questions OAuth/OIDC

phi1ipp April 19, 2023, 1:29pm 6

Wow, that is a surprise to me, honestly. Maybe somebody from Okta folks here can point us to a document describing why username is reserved. Is any other name of your choice working fine?

Post		Replies	Views
Add username claim to jwt ID Token OAuth/OIDC api	3	4874	July 9, 2021
Unable to add custom claims to access tokens when using a custom authorization server Questions	3	4794	November 25, 2019
Include reserved claim "oid" in token OAuth/OIDC	6	3239	May 2, 2023
Token error - 400 sub system claim cant be evaluated OAuth/OIDC api	7	8040	July 27, 2021
Okta Custom Claim as permissions OAuth/OIDC claims	2	74	April 23, 2025

Get Username claim in access token

Related topics