I'm trying to use Siteminder as an OIDC IdP and send a (custom) claim with an empty value, depending on a user profile attribute. For this I created a virtual attribute in my User Directory that returns the locality (l LDAP attribute) when exists or an empty value otherwise. I incorporated this attribute in my list of claims (for a custom scope) and then tested with a client requesting this new scope
It seems that Siteminder doesn't send the claim if it's value is empty - is this by design ? Is there any configuration option we can toggle/configure so that Siteminder would return the claim with an empty value ?
I know there is an option to customize the claims returned, though I haven't investigated this path yet.
FWIW I'm using the latest version (12.9 SP1, aka 12.9.100.3111).