Z
ZITADEL
Z
ZITADEL
no groups claim in OIDC response
Original message was deleted
ZITADEL
Join
ZITADEL - Identity infrastructure, simplified for you.
4,316
Members
View on Discord
F
FFO
•
9/9/24, 11:56 AM
Hm the action should do the trick
.
Can you check that the action name is addClaim
?
F
FFO
•
9/10/24, 12:57 PM
Hm can you check what happens with something like
function addClaim(ctx, api) { api.v1.claims.setClaim('group', 'admin'); }
function addClaim(ctx, api) { api.v1.claims.setClaim('group', 'admin'); }
F
FFO
•
9/10/24, 12:58 PM
can you also check if jira has a debug log to check the token
?
F
FFO
•
9/10/24, 12:59 PM
hm that is weird
F
FFO
•
9/10/24, 1:00 PM
can you share how the action is configured
?
F
FFO
•
9/10/24, 1:03 PM
Hm I think you need to change to
"Flow
: Complement token
, Triggers
: Pre Userinfo creation
, Pre access token creation
"
F
FFO
•
9/10/24, 1:04 PM
Not sure where jira reads the data from
, but I would start with pre
-userinfo
F
FFO
•
9/10/24, 1:04 PM
https://zitadel.com/docs/apis/actions/complement-token
ZITADEL Docs
This flow is executed during the creation of tokens and token introspection
.
F
FFO
•
9/10/24, 1:05 PM
yeah
, lets start with pre userinfo
F
FFO
•
9/10/24, 1:07 PM
still the same error
?
F
FFO
•
9/10/24, 1:07 PM
does it work if you do net check the group claim
?
F
FFO
•
9/10/24, 1:07 PM
ah that is a required field
F
FFO
•
9/10/24, 1:10 PM
hm sad
, can you try my action above
?
F
FFO
•
9/10/24, 1:17 PM
function addClaim(ctx, api) { api.v1.claims.setClaim('group', 'admin'); }
function addClaim(ctx, api) { api.v1.claims.setClaim('group', 'admin'); }
F
FFO
•
9/10/24, 1:23 PM
yeah
, i wanted to try if that is not corretly documented
F
FFO
•
9/10/24, 1:24 PM
What would help to know is
"where
" jira reads the claim from
.
.
. id
_token
, userinfo endpoint
, access
_token
.
.
.
F
FFO
•
9/10/24, 1:29 PM
lets try this
F
FFO
•
9/10/24, 1:36 PM
ok
, lets see what comes around there
F
FFO
•
9/10/24, 1:38 PM
happy to help
function addClaim(ctx, api) {
api.v1.claims.setClaim('group', 'admin');
}
function addClaim(ctx, api) {
api.v1.claims.setClaim('group', 'admin');
}
function addClaim(ctx, api) {
api.v1.claims.setClaim('group', 'admin');
}
function addClaim(ctx, api) {
api.v1.claims.setClaim('group', 'admin');
}