7wpoz (7wpoz) asked a question.
I created an application integration (OIDC, Web Application) and assigned a user to the application. From the okta Admin UI, it says: Claims for this token includes all user attribute on the app profile.
But, if I go to the third party application, it seem like it's not seeing all the attribute and claim info the the token. It's missing info like user email, title, etc. See output (with data altered):
Attributes:
issuer: https://trial-123456.okta.com
subject: 00xxxxgpi2m1XXXXXX
token_claims:
{
"amr": [
"swk",
"okta_verify"
],
"at_hash": "4xxxxQC5gn2WxmtLxxxXXXX",
"aud": "0oacqqejxcUBxxxxxxx",
"auth_time": 1711667741,
"exp": 171112345,
"iat": 171112345,
"idp": "00oxxxq78kjXi12345",
"iss": "https://trial-123456.okta.com",
"jti": "ID.XXXXXXXbch8tc6j1DoxZakjM_guxFJjAmXXXXXXX",
"nonce": "EZxxx7KrMwXXXXXXX",
"sub": "00uxxxgpi2XXXXXXXX",
"ver": 1
}
userinfo_claims:
{
"sub": "00uxxxgpi2XXXXXXXX"
}
Hello @7wpoz (7wpoz) Thank you for reacting out to our Community!
I was able to find an article that should provide some inside on this issue, please see below:
https://support.okta.com/help/s/article/Okta-Groups-or-Attribute-Missing-from-Id-Token?language=en_US
Additionally if you need further assistance we recommend to leverage the Okta Developer forums for this type of questions and take advantage of their expertise.
https://devforum.okta.com/
--
Subscribe Today: The Okta Community is on YouTube