eyu1l (eyu1l) asked a question.
Including AD groups as claims in an access token without a custom server
Hi, does anyone know if it is possible to include a selection of a user's AD groups as a cliam in an access token without using a custom authentication server?
This is definitely possible by configuring the server but unfortunately this is not a option as my company does not want to pay for this. From investigation we are able to configure an application that included the ad groups in the id token is there a way to extend this to the access token as well?
Hi, @eyu1l (eyu1l)
Thank you for posting on our Community page!
I did some research and found these articles that might help:
https://developer.okta.com/docs/guides/customize-tokens-groups-claim/main/
https://devforum.okta.com/t/groups-claims-id-token-and-access-token/8521
My advice would be to leverage the Okta Developer forums for this type of questions and take advantage of their expertise.
https://devforum.okta.com/
Thank you for reaching out to our Community and have a great day!
_____________________________________________________________________________
Community members help others by clicking Like or Select as Best on responses. Try it today.
_____________________________________________________________________________
💡 Community Moderator Tip: Join a group today and connect with other Okta customers by region or product.