Custom scopes/permissions not included in access token from Okta IdP

[tyf]

Hey @darrenk!

I see that there’s an org_id in the access token shared, are the permissions assigned directly to the user or by way of an organization? The following post explains the difference well and why you aren’t seeing any permissions in the permissions claim:

Permission claim empty if logging on using Organization - still unresolved

Hi @PatrickHeneise Thanks for reaching out to the Auth0 Community! My apologies for not getting back to you sooner. And yes, normally topics are automatically closed after 15 days from the last reply. Now, after my investigation, I found that there were no issues with getting the permissions added to the access token when authenticating with Organizations. I believe what happened involved the user only being assigned to those Permissions globally on their user profile (non-organization), in…