OIDC amr Reserved Claim

Henri Mikkonen henri.mikkonen at nimbleidm.com
Mon Jul 6 08:45:01 UTC 2026


On 1.7.2026 15.35, Scott Cantor via users wrote:
> You might just want to file that as an RFE/fix, I'm not sure what the justification is/was for reserving it unless we're actually populating it ourselves, and I didn't recall that we were (but Henri would know of course).

We're not populating the amr claim at the moment and by default it's 
included in the list of reserved claims for both id_token and access 
token. Those lists prevent claims to be included in the claims sets. The 
default lists can be customised though, and I've just clarified the 
documentation at [1].

BR,
Henri.

[1] 
https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1376879159/OPAttributeResolution#Reserved-Claims 




More information about the users mailing list