Hi Mushtaq,

OpenID connect claims returns according to the scope is being used. You can
configure those scopes and required claims in Identity Server.  Please
refer [1].

[1] https://docs.wso2.com/display/IS550/OpenID+Connect+Basic+Client+Profile

Thanks
Godwin

On Sun, Sep 9, 2018 at 7:16 AM Mushtaq Ahmed Barood <[email protected]>
wrote:

> Hi Team,
>
>
>
> We are using WSO2 IS 5.4 as our Identity server for our enterprise digital
> platform .
>
>
>
> In that process we have a requirement of
>
>
>
> 1: Login services for a service provider with below validations
>
>                 Finger print authentication of user and his finger print
> with NIC
>
>                 Before Finger print , we need to validate if the client is
> authorised to use the device (Finger print device with specific deviceId
> provided by us )
>
> We have planned to maintain the Device Information and Device to Client
> mapping and user to client mapping as groupof Entries( in OpenDj LDAP) i.e.
> each client will be  groupofEntries containing its users and devices
> assigned as members.
>
> We validate of the user and device being used belong to same group or not
>
> We need to do the finger print verification of the user with this finger
> print image and NationalId number with NIC (Already maintained by National
> Information Centre).
>
> Later we need to return the JWT token with few userinfo  attributes are
> claims .
>
>
>
> I thought of implementing  customgrant with custom userstore Manager , but
> my concern is with claims now , I suspect if I configure claims in service
> provider configuration , those will not be returned by default .
>
>
>
> Customgrant to get all details
>
>                 1:Validate user – client – device mapping
>
>                 2:Call external rest service to do finger print
> verification
>
>                 3:set the fetched user as authorised user
>
>
>
> After this will the JWT token generation and claims retrieval happens
> automatically ?
>
>
>
> P.S : With my experience of WSo2 in Al ELM(KSA) and also in MOHRE (UAE ) ,
> I proposed WSO2 and want to convince the management to confirm with this
> product , Hence I would appreciate if you could support me in this attempt.
>
> This is for new client Tahakom which is also Semi government company works
> for NIC projects.
>
>
>
> Thanks,
>
> Mushtaq Ahmed. B
>


-- 
*Godwin Amila Shrimal*
Associate Technical Lead
WSO2 Inc.; http://wso2.com
lean.enterprise.middleware

mobile: *+94772264165*
linkedin: *https://www.linkedin.com/in/godwin-amila-2ba26844/
<https://www.linkedin.com/in/godwin-amila-2ba26844/>*
twitter: https://twitter.com/godwinamila
<http://wso2.com/signature>
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to