OIDC Scopes

OIDC Scopes define what data (claims) you are requesting from the provider

• https://auth0.com/docs/get-started/apis/scopes/openid-connect-scopes
• Standarized OIDC scopes:
  • openid
  • profile: name, given_name, family_name, picture, locale, profile
  • email: email, email_verified
  • groups .../...

/authorize
/token

Always present:]

• sub unique user ID
• Token metadata: iss, aud, iat, exp

Related

• OAuth
• /realms/
• Okta groups
• OAuth scopes
• TEMPORAL_AUTH_SCOPES
• 403 Access denied
• OIDC token
• Google SSO: People API call

See also

• Realm, Keycloak realms, Realm roles, Master realm, Other realm, Realmgroup.io, /auth/realms/, /realms/, --import-realm
• Scope, OIDC Scopes
• OIDC Scopes, claims, mappers, /token, scopes_supported (Okta)