CODEWITHSUNDEEP
oauth-2.0wso2wso2-identity-server
Mak
Mak

Reputation: 1078

How to add role of the user in oauth token (WSO2 IS)

I am using WSO2 Identity server as IAM. In my angular application, I need samlsso, Hence I have implemented it and login is working as expected. Now, I want an authorization based on role(XACML policy) from the IS server. But in the token, I am getting following information only. There is no any information about user's roles and neither I have seen to configure it in console(While I am creating IDP).

Sample Token:

{
  "at_hash": "vYBW9************vg3uw",
  "aud": "rmSJ************xIHYWMVEYwa",
  "sub": "admin",
  "azp": "rmSJ************TpxIHYWMVEYwa",
  "amr": [
    "BasicAuthenticator"
  ],
  "iss": "https://localhost:9443/oauth2/token",
  "exp": 1572779632,
  "iat": 1572776032,
  "nonce": "QG057mrPa*************************c2Eda",
  "sid": "*******-a7e6-48af-88e0-***********"
}

Here as you can see I have a username as sub(admin) but no roles of it.

Does anyone have any idea how to get them?

Upvotes: 1

Views: 323

Answers (1)

Bee
Bee

Reputation: 12502

Try adding http://wso2.org/claims/role as a requested claim in the SP.

See [1] for more details.

[1] https://docs.wso2.com/display/IS580/Configuring+Claims+for+a+Service+Provider

Upvotes: 2

Related Questions