How To: Send GroupList as an Array in OIDC Claims

Version Affected: 20.06 HF 16 and later

 

Overview

This article explains how to send a user's GroupList as an array in an OpenID Connect (OIDC) response, instead of the default comma-separated list. Some Service Providers require the GroupList as an array rather than a comma-separated string.

Send GroupList as an Array

1. In the Admin Console, go to Advanced Settings, then Admin Realm.
2. Select the OIDC realm that needs the setting changed, then go to its Post Authentication tab.

3. Scroll down and add a custom claim. Set the claim Name, then in the value drop-down, select GroupList As Array.

4. Click Save to apply the change.

Special Considerations

Prior to 20.06 HF 16, the GroupList was always sent as a comma-separated list, with no option to send it as an array. This option was added in:

• 20.06 HF 16
• 21.04 HF 11
• 22.02 HF 5
• 22.12 and later, where it is available in the base code

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.