OIDC amr Reserved Claim
Henri Mikkonen
henri.mikkonen at nimbleidm.com
Mon Jul 6 08:45:01 UTC 2026
On 1.7.2026 15.35, Scott Cantor via users wrote:
> You might just want to file that as an RFE/fix, I'm not sure what the justification is/was for reserving it unless we're actually populating it ourselves, and I didn't recall that we were (but Henri would know of course).
We're not populating the amr claim at the moment and by default it's
included in the list of reserved claims for both id_token and access
token. Those lists prevent claims to be included in the claims sets. The
default lists can be customised though, and I've just clarified the
documentation at [1].
BR,
Henri.
[1]
https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1376879159/OPAttributeResolution#Reserved-Claims
More information about the users
mailing list