Robv.37654 (Customer) asked a question.
app.profile is empty in custom claims expression
In a custom authorization server I want to use the expression `app.profile.groups` for a custom claim but `app.profile` is empty. The only fields with content in `app` are `id` and `clientId` but the profile field contains `{}`.
I was expecting to find the groups assigned to the application under `app.profile.groups` (my application is of the "API Services").
How can I put the groups assigned to an application in a custom claim?
Hi @Robv.37654 (Customer),
Thank you for posting on the Okta community page!
I have done some research and I have managed to find the bellow documentation that might be useful in resolving the issue that you are encountering:
Additionally, my advice would be to leverage the Okta Developer forums for this type of questions and take advantage of their expertise.
I hope the above information is helpful!
On another note, the Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.
Hi @flaviu.vrinceanu1.5628408972654734E12 (Customer Success Service Delivery)
In the end I was unable to extract groups assigned to the application and had to resort to set group names statically in the JWT profile using the Terraform Okta module.
To me it seems the groups claim works differently for applications of the type "API Services" than for applications of the type "SPA".
Nevertheless, thanks for the swift reply.
KR, Rob