uchicago / shibboleth-oidc

OpenID Connect support for the Shibboleth Identity Provider v3
Apache License 2.0
81 stars 19 forks source link

Add the ability to define custom scopes mapped to default/custom claims #38

Open gtkrug opened 7 years ago

gtkrug commented 7 years ago

I see how to define a new scope easily enough in the oidc-protocol.xml, but how to do either of the following:

1) Associate a default claim with the newly defined scope? 2) Associate a new claim with the newly defined scope?

In my toying around thus far to support a new claim, I have been updating multiple objects in the Mitre source and one class in the idp-oidc-impl.

mmoayyed commented 7 years ago

You can define a custom scope, but I don't think there is an easy way to associate claims with the scope, default or otherwise, without altering java code, etc.

/cc @langedb something to add?