userType as Claim

[deck1187hw]

HI I was wondering If anyone knows how to add the usertype as a custom claim in my custom authorization server.
Tried different combinations but none of them work

[andrea]

Looks like the only values that can be pulled in via a claims expression are values that are within the user’s profile

I was able to get the user type included in a claim via mappings, but its a little manual

1. Create custom attribute on your OIDC application to store the user type (I’m using variable userType)
   

   

2. Configure Profile Mappings between each of your user types and this OIDC app by using a static string to indicate what user type this is
   

   
   
   
   
   
   
   

3. Configure your claim to use the appuser profile as the source instead of the user profile
   

   

4. Request tokens for a user with the different user types