Groups are not returned when using OIN app

Questions OIN Submissions
1

If we use non-OIN app and follow instructions to customize token claims (SignOn tab → OpendID Connect ID Token → groups claim type), I see that groups are returned by Okta when authorization request contains “groups” scope.

We recently published an OIN app template to simplify configuration. This template does not allow us to tweak ID token claims to send groups. However, we were hoping that groups will at least be sent in /userinfo when “groups” scope is passed in the authorization request.

Is it possible to receive groups from Okta when using app template? Does it require additional configuration? Without the ability to receive groups, app template does not make sense for our customers.

2

Hi,

Currently, group claims are not supported in OIN apps.

1 Like
3

Is this part of the roadmap at some point?

We were hoping to use template to simplify integration. However, lack of groups will render it unusable since customers can get groups with custom/non-OIN app.

4

Not in the near future. But I will share the feedback with our team to get the feature under consideration.