Attribute Mappings (optional)<\/strong><\/h2>\n\n\n\n

Standard Scopes<\/strong><\/h3>\n\n\n\n

Scopes are space-separated lists of identifiers used to specify what access privileges are being requested. JumpCloud supports two of OIDC’s built in scope identifiers. Each scope includes different user attributes that are sometimes required by the Service Provider.<\/p>\n\n\n\n

<\/p><\/div>

Note:<\/strong> \n

You can edit the Service Provider Attribute Name according to their specifications. The JumpCloud attribute cannot be edited.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n

\n

Supported Scope Properties<\/h3>\n

\n \n\n \n \n \n \n \n

\n OIDC Property <\/th>\n	\n Description <\/th>\n	\n Required <\/th>\n	\n JumpCloud Property <\/th>\n <\/tr>\n
\n openid <\/td>\n	\n Identifies the request as an OpenID Connect request. <\/td>\n	\n Yes <\/td>\n	\n openid <\/td>\n <\/tr>\n
\n profile <\/td>\n	\n Requests access to the end user's default profile claims. <\/td>\n	\n No <\/td>\n	\n profile <\/td>\n <\/tr>\n
\n email <\/td>\n	\n Requests access to the email and email_verified claims. <\/td>\n	\n No <\/td>\n	\n email <\/td>\n <\/tr>\n
\n offline_access <\/td>\n	\n Requests a refresh token used to obtain more access tokens without re-prompting the user for authentication. <\/td>\n	\n No <\/td>\n	\n offline_access <\/td>\n <\/tr>\n <\/table>\n<\/div><\/div>\n\n\n\n Scope Values<\/strong><\/h3>\n\n\n\n \n openid is required for any OpenID request connect flow. If the openid scope value isn’t present, the request may be a valid OAuth 2.0 request, but it’s not an OpenID Connect request.<\/li>\n\n\n\n profile requests access to these default profile claims: family_name, given_name.<\/li>\n\n\n\n offline_access can only be requested in combination with a response_type that contains code. If the response_type doesn’t contain code, offline_access is ignored.<\/li>\n<\/ul>\n\n\n\n A Standard Scope can be added to the connector by selecting one or both of the scopes.<\/p>\n\n\n\n Additional User Attributes<\/strong><\/h3>\n\n\n\n Additional attributes can be added to the OIDC connector with or without Standard Scopes. There are three types of attributes available.<\/p>\n\n\n\n User Attribute Mapping<\/strong><\/h4>\n\n\n\n \n User-specific attributes sent to the Service Provider. For example, the Service Provider requires the location and job title for each user. Mapping those two attributes to JumpCloud attributes will add those claims (attributes) to the ID token.<\/li>\n<\/ul>\n\n\n\n Constant Attributes<\/strong><\/h4>\n\n\n\n \n Constant-value attributes sent to the Service Provider. For example, a constant attribute for session duration limits session times for all users of the application, or service provider. <\/li>\n<\/ul>\n\n\n\n Group Attributes<\/strong><\/h4>\n\n\n\n \n Groups that connect the user to the application are included in assertions to that application. The Groups Attribute Name is the service provider’s name of the group attribute (e.g. memberOf). <\/li>\n\n\n\n If the Group Attribute option is selected and the field is prepopulated with the group attribute name, that means we\u2019ve validated that the group attribute is supported by the service provider. If the group attribute option isn\u2019t selected and the Group Attribute Name field is empty, you need to find out if the service provider supports group attributes on your own. <\/li>\n<\/ul>\n\n\n\n <\/p><\/div> Note:<\/strong> \n When you select the group attribute option for a connector, you must include a Groups Attribute Name. You’ll receive an error when you attempt to activate the connector if you select this option and leave Groups Attribute Name blank.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n \n Group attributes may be used in some service providers to map roles.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":" Creating or updating the OIDC App Attribute Mappings (optional) Standard Scopes Scopes are space-separated lists of identifiers used to specify […]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2993,2902],"support_tag":[],"coauthors":[2839,2841],"acf":[],"yoast_head":"\n