-
Notifications
You must be signed in to change notification settings - Fork 156
[Studio OIDC & KeyCloak] Scopes requested at login stage are hardcoded #2091
Open
Description
When OIDC (OAuth2Provider or KeycloakOAuth2Provider) is used to authenticate users, scope lists asked during authentication are not defined, so, it seems that one used per default is :
- openid
- profile
Scopes are useful to get user information and map them to Tock roles.
It could be cool to have a property, for example, for keycloak tock keycloak scopes with default values (openid profile email) that can let the Ops define needs scopes.
Activity
Metadata
Metadata
Assignees
Labels
No labels