# Getting custom scopes configured external IDP **URL:** \ **Category:** OAuth/OIDC\ **Created:** [May 16, 2022, 5:30pm UTC](https://devforum.okta.com/t/getting-custom-scopes-configured-external-idp/20661 "2022-05-16T17:30:02Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![deepstech](https://avatars.discourse-cdn.com/v4/letter/d/e19adc/32.png) [@deepstech](https://devforum.okta.com/u/deepstech)\ **Post date:** [May 16, 2022, 5:30pm UTC](https://devforum.okta.com/t/getting-custom-scopes-configured-external-idp/20661/1 "2022-05-16T17:30:02Z")
HI, We have configured an external IDP and the inbound federation is working fine. The external IDP has added some groups in a custom scope in their authorization server. our app needs to retrieve these info , Is there any way to pass custom scope created by IDP tenant? We tried passing scope from our security-\>identoty providers-\>scopes, but it is resulting in an error ‘user cancelled social login request’ ---
**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\ **Post date:** [May 23, 2022, 9:31pm UTC](https://devforum.okta.com/t/getting-custom-scopes-configured-external-idp/20661/2 "2022-05-23T21:31:12Z")
Do you get this error if you log in yourself/via a test user through the IdP? Can you request tokens manually from this IdP with these additional scopes? Is the client configured for used by the IdP in Okta allowed to request this scope? ---
**Author:** ![deepstech](https://avatars.discourse-cdn.com/v4/letter/d/e19adc/32.png) [@deepstech](https://devforum.okta.com/u/deepstech)\ **Post date:** [May 24, 2022, 12:49am UTC](https://devforum.okta.com/t/getting-custom-scopes-configured-external-idp/20661/3 "2022-05-24T00:49:52Z")
Hi, We are getting this error when we login using the IDP. In our login page ,there is an option to login using IDP where we can give IDP credentials and thus inbound federation happens. From IDP, they are able to send the scope in request and see the groups through token preview . We have not tested it using postman Regarding the third question. Does it mean the IDP that has configured an oidc client has to do some configuration in their oidc client app? Thanks ---
**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\ **Post date:** [February 12, 2024, 7:41pm UTC](https://devforum.okta.com/t/getting-custom-scopes-configured-external-idp/20661/4 "2024-02-12T19:41:15Z")