Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
Get JWT assertion(that has claims in oidc scope and has email address and country claim) from an identity provider(name it as JWTIDP).
Configure the playground as OAuth service provider in the primary IS.
Enable Use tenant domain in local subject identifier and Use user store domain in local subject identifier under in Local & Outbound Authentication Configuration
Invoke the token endpoint of primary IS with the JWT assertion obtained from the configured IDP(JWTIDP).
Check the sub value in the obtained id_token. It does not have tenant domain or userstore domain.
This issue is being closed due to extended inactivity. Please feel free to reopen it if further attention is needed. Thank you for helping us keep the issue list relevant and focused!
Reported Env: db: postgres db wso2is-5.9.0 alpha in tenant mode
Referred Configuring JWT Grant Type doc to configure JWT bearer grant Steps to reproduce: