Manage OIDC Claims and Scopes

Use the OIDC Settings page to define the claims and scopes that can be used for adding OIDC relying party. The changes that you make to claims will be applied to all the OIDC connections that use these claims.

When you configure an OIDC-based protected resource, you control which claims are sent to the application. Each claim includes customizable display text that appears in user consent forms, helping users understand what information is being shared from the identity provider (IdP) to the application.

A global scope and claim mapping configuration allows you to:

• Map identity source attributes to OIDC claims

• Optionally group claims into scopes by entering the name of an existing or new scope in the Scopes field

• Reuse configured claims and scopes across multiple OIDC applications

This centralized configuration helps you maintain consistent, transparent, and secure data sharing between RSA ID Plus and connected applications.

Procedure 

To add claims and scopes:

1. In the Cloud Administration Console, click Access > OIDC Settings.

2. On the Claims tab, provide the details as described in the following table.

   Field	Description
   Claim Name	Name of the claim.
   Select source	Select the source. Identity Source sends a user attribute from the identity source. Constant sends a static string, for example, the name of the application.
   Value/select property	Select a property if the Source is Identity Source or specify a value if Source is Constant.
   Scopes	Type the name of an existing scope or new scope. If you add a new scope, it will appear on the Scopes tab.
   Consent Description	Provide a user-friendly description about the claim when getting user's permission in a consent form.

3. Click the plus icon to save the claim and add another claim.

4. On the Scopes tab, enter the new scope.

   Note:  The Scopes tab displays the scopes added from both Claims and Scopes table. Click the expand icon to view the associated claim details.

5. To save the scope and add another scope, click the plus icon.

6. Click Save Settings.

7. (Optional) To publish this configuration and immediately activate it, click Publish Changes.