I think you have to list the scopes available in the service definition 
like described here:
https://apereo.github.io/cas/development/installation/OIDC-Authentication.html#scope-based-claims
  
Le jeudi 25 juin 2020 à 13:04:33 UTC+2, Jakub Fridrich a écrit :

> info: CAS 6.2.0-RC5 builded from cas-overlay-template
>
> Problem:
> OpenID Connect in userinfo endpoint does not display required 
> attributes (as iss, sub, aud, exp) if claims are set. 
>
> Scopes requested by client: openid, profile, email, address, phone
> Claims requested by client: {"userinfo":{ "sub":null, "iss": null, 
> "name": null, "email": null, "first_name": null, "last_name": null }} or 
> {"userinfo":{"name": 
> null, "email": null, "first_name": null, "last_name": null }}
>
>
>
>
>
> Service configuration:
> {
>   "@class" : "org.apereo.cas.services.OidcRegisteredService",
>   "clientId": "XXX",
>   "clientSecret": "XXX",
>   "serviceId": "^https://xwikl.xxxserver.*";,
>   "name": "XTest",
>   "id": 5,
>
>   "attributeReleasePolicy" : {
>    "@class" : "org.apereo.cas.services.ReturnAllAttributeReleasePolicy"
>   }
> }
>
>
> Dears any sugestions how to get in userinfo endpoint required fields (iss, 
> sub, aud, exp) ?
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/735b40dc-ebfa-4ad2-89ba-65154e566b63n%40apereo.org.

Reply via email to