Hi,

I think you have to map your custom user attributes from attribute
repository, to your claims/scope oidc :

https://apereo.github.io/cas/5.3.x/installation/Configuration-Properties.html#openid-connect

Jérôme.

Le lun. 20 juil. 2020 à 20:55, Yan Zhou <[email protected]> a écrit :

> Hello,
>
> I have CAS5.3.x, and OIDC working.
>
> I am setting up a client with scopes like "readUser" and "writeUser".
>  With a valid access token, at /introspect endpoint, I expect to see the
> scopes defined in the service registry, but all I see is "openid", I am
> missing all the other scopes included in the service registry.
>
> What am I missing?
>
> Thanks,
> Yan
>
>
> My service registry has this:
>
> .......
>
>   scopes:
>   [
>     java.util.HashSet
>     [
>       openid
>       profile
>       email
>       writeUser
>       readUser
>     ]
>   ]
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/da275145-cc8b-4563-b4cc-d3d3b69965e5o%40apereo.org
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/da275145-cc8b-4563-b4cc-d3d3b69965e5o%40apereo.org?utm_medium=email&utm_source=footer>
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAD6KnbzKDhB-yBzSvpV-9pOJOTBWZ2cixfYQ4aVZrhcy3JWdEw%40mail.gmail.com.

Reply via email to