[Openid-specs-ab] user claims in id_token

Preibisch, Sascha H Sascha.Preibisch at ca.com
Tue Aug 18 21:28:29 UTC 2015


Hi!

I almost feel bad to ask because I should find the answer in the spec. But I did not find it.

Is it valid to request "userinfo" related claims to be in the id_token?

Can I sent a request object like shown below? I would like to avoid the call to the /userinfo endpoint.

Thanks, Sascha

{
   "userinfo":
    {
     "given_name": {"essential": true},
     "nickname": null,
     "email": {"essential": true},
     "email_verified": {"essential": true},
     "picture": null,
     "http://example.info/claims/groups": null
    },
   "id_token":
    {


     "given_name": {"essential": true},
     "nickname": null,
     "email": {"essential": true}

} }
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20150818/a21b50a1/attachment.html>


More information about the Openid-specs-ab mailing list