Hey, I am using an API with RBAC enabled and I am including the permissions in the access token. My problem now is that I need to use mfa when the user wants to withdraw funds from our platform. Before I turned RBAC on, I could request the custom scope withdraw:funds and then the access token woul…

Sorry for the delayed response. I did more digging on this, and found this from the doc: As long as RBAC is enabled, the scope claim of the access token includes an intersection of the requested permissions and the permissions assigned to the user, regardless of whether permissions are also inc…

RBAC Step up Authentication Custom Scopes

Get Help

dan.woda July 1, 2020, 4:26pm 3

Hi @gregor1337,

Welcome to the Community!

Have you enabled Add Permission in the Access Token in your API setup?

Let me know and we can go from there!
Dan

Topic		Replies	Views
Permissions not included in access token for MFA flow Get Help	7	2468	March 9, 2021
Access token is missing permissions when using MFA Get Help jwt , mfa	5	2985	March 24, 2021
Trouble understanding scopes vs permissions Get Help api , scopes , access-token , api-authorization , scope	7	9349	January 4, 2021
Merge scope and permissions in scope in a rule Get Help rules	4	6186	April 1, 2020
Receive mfa_token from universal login Get Help api , mfa	2	3256	March 4, 2022

RBAC Step up Authentication Custom Scopes

Related topics