OpenID: Settings scopes with dynamic client registration

[Henri Mikkonen]

Hi Max,

On 30.6.2026 16.02, Max Nuding via users wrote:
> So, according to the OPDynamicClientRegistration documentation at [1] I 
> can add a "scope" parameter to the client metadata.
> However, no matter what I put there, the response always contains the 
> following:
> 
>  > "scope": "openid profile email"
> 
> which is our configured default value. Even if we only specify
> 
>  > "scope": "openid"
> 
> during the registration. Are we doing something wrong? Is this a bug?

Indeed, it's a bug that was reported to me earlier by other means but it 
wasn't filed or fixed yet.

I filed it here: https://shibboleth.atlassian.net/browse/JOIDC-283

BR,
Henri.