Configuring New User Attribute Mapping For Custom Claims - Identity and Access Management Services - 4.4 - 4.4 - Ready - Other - external

Identity and Access Management Services

Platform
Other
Product
Identity and Access Management Services
Release
4.4
License

You can add a new user attribute mapping for custom claims. The newly added user attribute mapping must be added as a custom claim attribute in the issued access token. For additional information on custom claim attributes, see Reserved Values for Custom Attributes.

Note: This feature is not applicable for provider types that do not support user attribute mapping. For example, FHIR and OnBase providers.

To obtain custom claim values in issued tokens:

  1. Update the user attribute mapping section of the corresponding provider in the idpconfig.json file. The image below displays a sample configuration of the user attribute mapping section in the idpconfig.json file.
    Example of user attribute mapping section in idpconfig.json file
  2. Update the API resource corresponding to the required scope in the idpconfig.json file by adding the appropriate user claim. The image below displays an example of a user claim under the list of user claims.
    Example of user claims
  3. Add the scope associated with the custom claim during the token request.
    The issued access token contains the value of the corresponding claim as configured in the user attribute mapping.