Roles in id token
Hi! I've searched everywhere but I can't find a way to customize the id token in order to include roles. Is this supported, or is it only possible with the access token?
OHey! I suspect you might have also asked this question via the Live Chat.
Great question, we dont currently have built in functionality for the roles to be provided in the id_token rather than the access token.
This stems from best practice for OIDC where the ID token is primarily intended to convey identity information about the user, such as their user ID, name, and other profile information. The access token, on the other hand, is used to authorize access to resources on a resource server and may contain information such as roles, permissions, or scopes that are relevant to access control decisions.
Is there any particular reason why you are wanting the roles in the id_token?
Great question, we dont currently have built in functionality for the roles to be provided in the id_token rather than the access token.
This stems from best practice for OIDC where the ID token is primarily intended to convey identity information about the user, such as their user ID, name, and other profile information. The access token, on the other hand, is used to authorize access to resources on a resource server and may contain information such as roles, permissions, or scopes that are relevant to access control decisions.
Is there any particular reason why you are wanting the roles in the id_token?