Add List user's organizations id and roles to the token

[agustin.soler]

Hello!
I’m trying to create a rule or something to add the list user’s organizations and it’s roles to the token…:
for example the token would be something like this:

{
“roles”: [
“REGULAR”,
“SUPERADMIN”
],
“iss”: “https://example.eu.auth0.com/”,
“sub”: “auth0|000123123000”,
“aud”: [
“https://example//api/v1/”,
“https://example.eu.auth0.com/userinfo”
],
“iat”: 1653295571,
“exp”: 1653303631,
“azp”: “cp2hivXUCzelTGKp4WQymFibf39GZs3O”,
"organizations: [{org1Id: 12345, roles:[“Regular-User, Admin”]}, {org2Id: 131231241, roles:["READER, SUPER ADMIN]}…]

}

I hope you can help me!!

[tyf]

Hello there @agustin.soler !

Assuming a user is authorizing through an organization, the org_id should be present in the ID/Access token(s) returned - Please see this article for more details.

Regarding roles specifically, we recommend setting up an Action to add these as a custom claim to tokens:

Setting a user role in an action will not update the permissions in the access token

Hi @kl.auth Welcome to Auth0 Community !!! Don’t use Management API call for this. You can add a custom roles claim in a post-login action like this: /** * @param {Event} event - Details about the user and the context in which they are logging in. * @param {PostLoginAPI} api - Interface whose methods can be used to change the behavior of the login. */ exports.onExecutePostLogin = async (event, api) => { const namespace = 'https://my-app.example.com'; if (event.authorization) { api…

Hope this helps!

[agustin.soler]

Hello @tyf thank you !

But with a “regular login” is there a way to get the list of all organizations that the user belongs and add it to the token like I askeb above?

"organizations: [{org1Id: 12345, roles:[“Regular-User, Admin”]}, {org2Id: 131231241, roles:["READER, SUPER ADMIN]}…]

[tyf]

Happy to help where I can!

@agustin.soler

But with a “regular login” is there a way to get the list of all organizations that the user belongs and add it to the token like I askeb above?

Without logging in within the context of an organization, I’m not aware of a way to add the Organizations to a user’s id/access token - You could always poll the Management API for a list of Organizations the user is associated with, but again this would be outside the scope of a token.