Symantec Access Management

  • Private Community
 View Only

  • 1.  How to pass an OpenID Connect Static Claim?

    Posted Jun 12, 2019 02:03 PM
    In SAML, one had the ability to pass to the SP a static attribute in the SAML assertion. This seems to not be possible out of the box using OpenID Connect. Currently, the attribute must exists in the user directory.

    Is there any way to pass a static claim in the id token?​


  • 2.  RE: How to pass an OpenID Connect Static Claim?
    Best Answer

    Posted Jun 12, 2019 04:33 PM

    ​I think I found the answer here:

    https://docops.ca.com/ca-single-sign-on/12-8/en/configuring/use-ca-single-sign-on-as-openid-connect-provider/generate-custom-claims

    Weird that now you have to custom code this instead of having it integrated in the WAMUI like SAML did.
    Very inconvenient.


    Original Message