user_claim_evaluation_failure Warnings in System Logs
Last Updated:
Overview
This article explains why the following warnings appear in System logs:
user_claim_evaluation_failure
Applies To
- OpenID Connect (OIDC)
- System Log events
- user_claim_evaluation_failure
Cause
The user_claim_evaluation_failure is a warning message which indicates that a custom claim that was configured in an org is evaluating to null or otherwise failing to evaluate.
Solution
These warnings are surfaced in the system log so that the admin can review the claim.
To verify this in the System Logs, check the Target section in the system log for the claim name and DetailEntry to see the Oauth2claimvalue and check if the evaluation failure is expected.
Here are some scenarios that may result in these warnings:
- The user profile attribute referenced in the claim is NULL for the user logging in
- If there is something wrong with the expression, for example, a group expression that is failing to evaluate for many users
Generally, if these evaluation failures occur, the custom claim referenced will not be present in the token. Any claim that evaluates to ‘null’ (including default claims for the profile scope) will just not be included.
If the claim is evaluating to a 'null' value, add a check to the expression, such as the following, to fix the warnings:
(user.empId != null) ? user.empId : ''
