Unable to add given_name token to id token

Questions
1

While trying to add the claim as “given_name” in authorization server, I’ve been getting the below error:

“The claim name must be unique within an authorization server.”

Btw, this is an oidc auth code app.

If I give another name, it works (at least it doesn’t give the above error message) but I would like to access the name by the “given_name” key if possible.

I have checked both the ID token and the Access Token and given_name does not appear in eithr. Note that with Entra Id, both of these names appear, so it looks like they are part of the OIDC standard.

I’m using the following scopes:

openid email profile offline_access

Gven name doesn’t appear in the clams tab for the default server.

Any ideas? It’d had to add a configuration requirement if it wasn’t necessary.

2

given_name is a pre-existing claim and does not need to be created (like you mentioned, its a standard claim and is part of the OIDC spec)

You are likely encountering the thin token behavior described here, wherein if you request both an ID and Access Token in the same request, the ID token will be “thin” and will not contain all of the expected claims. To get the full list of claims, you will need to send the Access Token to the Userinfo endpoint

1 Like
3

Many thanks for the fast response!