er1xy (er1xy) asked a question.
How to get a custom attribute on user or application profile in the access token retrieved by the authorize api?
Hello,
One of our requirements binds us to use another custom attribute to know what our user can access. This is basically set as a custom string array attribute through profile editor. Now we use okta only to authenticate and authorize the user and rely on the access JWT token to safely check on what resources user has access. All I need at this point is to have this custom attribute in the access JWT token we get via authorize api call.
Appreciate any pointers or help
Alright, after digging around. I found a way to do it via adding a custom authorization server and putting these custom attributes in the claims.