Re: [Architecture] Handling custom claims when generating JWT token using JWT grant type

2018-05-30 Thread Farasath Ahamed
On Wed, May 30, 2018 at 4:17 PM, Megala Uthayakumar wrote: > Yes. I tried to explain the same thing, seems it is confusing. I will > simplify it. > Thanks for the clarification. > > Thanks. > > Regards, > Megala > > On Wed, May 30, 2018 at 4:12 PM, Farasath Ahamed > wrote: > >> >> >> On Wed,

Re: [Architecture] Handling custom claims when generating JWT token using JWT grant type

2018-05-30 Thread Megala Uthayakumar
Yes. I tried to explain the same thing, seems it is confusing. I will simplify it. Thanks. Regards, Megala On Wed, May 30, 2018 at 4:12 PM, Farasath Ahamed wrote: > > > On Wed, May 30, 2018 at 4:04 PM, Megala Uthayakumar > wrote: > >> Resending the missing image >> >> >> > > Regarding "SP

Re: [Architecture] Handling custom claims when generating JWT token using JWT grant type

2018-05-30 Thread Farasath Ahamed
On Wed, May 30, 2018 at 4:04 PM, Megala Uthayakumar wrote: > Resending the missing image > > > Regarding "SP Claim Mapping exist with requested attributes" decision, shouldn't this simply be SP requested claims since we do not care about SP claim mapping in OIDC flow? > ​​ > > On Wed, May 30,

Re: [Architecture] Handling custom claims when generating JWT token using JWT grant type

2018-05-30 Thread Megala Uthayakumar
Resending the missing image ​​ On Wed, May 30, 2018 at 4:02 PM, Megala Uthayakumar wrote: > *Hi,* > > *As per the offline discussion with IAM team, following is the agreed > design.* > > > > *Darshana/Maduranga/Farasath/IAM Team - Please do correct me if I have > misunderstood regarding

Re: [Architecture] Handling custom claims when generating JWT token using JWT grant type

2018-05-30 Thread Megala Uthayakumar
*Hi,* *As per the offline discussion with IAM team, following is the agreed design.* *Darshana/Maduranga/Farasath/IAM Team - Please do correct me if I have misunderstood regarding this.* *Thanks.* Regards, Megala On Thu, May 24, 2018 at 9:41 AM, Megala Uthayakumar wrote: > Hi, > > As per

Re: [Architecture] Handling custom claims when generating JWT token using JWT grant type

2018-05-23 Thread Megala Uthayakumar
Hi, As per the meeting held offline, it was decide to only send the custom claims when the scope is given as "openid". Sending custom claims that are not defined in dialect can be supported by adding new claims to openid dialect and by appending the relevant scopes to "/oidc" resource in config

Re: [Architecture] Handling custom claims when generating JWT token using JWT grant type

2018-05-23 Thread Bhathiya Jayasekara
Thanks, I just understood the scenario. Thanks, Bhathiya On Wed, May 23, 2018 at 2:36 PM, Megala Uthayakumar wrote: > Hi Bhathiya, > > On Wed, May 23, 2018 at 1:05 PM, Bhathiya Jayasekara > wrote: > >> Hi Megala, >> >> On Wed, May 23, 2018 at 10:11 AM,

Re: [Architecture] Handling custom claims when generating JWT token using JWT grant type

2018-05-23 Thread Megala Uthayakumar
Hi Bhathiya, On Wed, May 23, 2018 at 1:05 PM, Bhathiya Jayasekara wrote: > Hi Megala, > > On Wed, May 23, 2018 at 10:11 AM, Megala Uthayakumar > wrote: > >> Hi All, >> >> I am working on $subject for IS 5.5.0. >> >> When handling custom claims, we do have

Re: [Architecture] Handling custom claims when generating JWT token using JWT grant type

2018-05-23 Thread Bhathiya Jayasekara
Hi Megala, On Wed, May 23, 2018 at 10:11 AM, Megala Uthayakumar wrote: > Hi All, > > I am working on $subject for IS 5.5.0. > > When handling custom claims, we do have two options. > >1. Handling custom claims as we have handled it in the >SAML2BearerGrantHandler. >

[Architecture] Handling custom claims when generating JWT token using JWT grant type

2018-05-22 Thread Megala Uthayakumar
Hi All, I am working on $subject for IS 5.5.0. When handling custom claims, we do have two options. 1. Handling custom claims as we have handled it in the SAML2BearerGrantHandler. - Current SAML2BearerGrantHandler converts the claims coming from IDP to local claims and then