# \#claims **URL:** https://community.auth0.com/tag/claims/391.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Json from Active Directory, not everything in claims](https://community.auth0.com/t/json-from-active-directory-not-everything-in-claims/86524)
**Author:** [@mab](https://community.auth0.com/u/mab)\ **Replies:** 2\ **Last updated:** [July 7, 2022, 6:12am UTC](https://community.auth0.com/t/json-from-active-directory-not-everything-in-claims/86524 "2022-07-07T06:12:05Z")
Hi, I have a connection with the active directory. Auth0 gets some JSON with data from AD, for example { "created\_at": "2022-07-04T06:07:29.088Z", "email": "mas@test.com", "name": "Martin Sas (MAS)", "n… --- ## [What does "Name of the claim (note that this may need to be a fully-qualified URL)." mean for custom claims](https://community.auth0.com/t/what-does-name-of-the-claim-note-that-this-may-need-to-be-a-fully-qualified-url-mean-for-custom-claims/85638)
**Author:** [@jgleason](https://community.auth0.com/u/jgleason)\ **Replies:** 4\ **Last updated:** [June 22, 2022, 8:42pm UTC](https://community.auth0.com/t/what-does-name-of-the-claim-note-that-this-may-need-to-be-a-fully-qualified-url-mean-for-custom-claims/85638 "2022-06-22T20:42:52Z")
I am setting a custom claim like this… api.accessToken.setCustomClaim(…, event.user.app\_metadata.corporation\_id); Is there a reason in this case to need a url for the claim name as describe? --- ## [Update Access Token custom claims with Refresh Token](https://community.auth0.com/t/update-access-token-custom-claims-with-refresh-token/82336)
**Author:** [@hector](https://community.auth0.com/u/hector)\ **Replies:** 5\ **Last updated:** [May 2, 2022, 4:31pm UTC](https://community.auth0.com/t/update-access-token-custom-claims-with-refresh-token/82336 "2022-05-02T16:31:19Z")
Hello! We are using the React Native SDK to handle login, logout and fetching new access tokens using the refresh token. During login we pass a query parameter to the authentication page, which is read by the Login Acti… --- ## [Best practice on handling aud claims?](https://community.auth0.com/t/best-practice-on-handling-aud-claims/78469)
**Author:** [@martinbean](https://community.auth0.com/u/martinbean)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 11:34pm UTC](https://community.auth0.com/t/best-practice-on-handling-aud-claims/78469 "2022-02-22T23:34:43Z")
I’m started using JWT-based authorisation in my applications, as I have various applications that need to talk to each other and don’t want the overhead of OAuth and constantly bouncing users around to authorise apps. I… --- ## [Invalid claims from backend API in production but successful in development environment](https://community.auth0.com/t/invalid-claims-from-backend-api-in-production-but-successful-in-development-environment/76125)
**Author:** [@authgent](https://community.auth0.com/u/authgent)\ **Replies:** 4\ **Last updated:** [January 11, 2022, 5:47pm UTC](https://community.auth0.com/t/invalid-claims-from-backend-api-in-production-but-successful-in-development-environment/76125 "2022-01-11T17:47:45Z")
I am using Auth0Provider to secure routes in my React application. I also have a Flask backend that protects resources from this tutorial: Auth0 Python API SDK Quickstarts: Authorization I then use getAccessTokenSilentl… --- ## [How to get token with jku claim](https://community.auth0.com/t/how-to-get-token-with-jku-claim/75877)
**Author:** [@david.rouchet](https://community.auth0.com/u/david.rouchet)\ **Replies:** 7\ **Last updated:** [January 7, 2022, 11:16pm UTC](https://community.auth0.com/t/how-to-get-token-with-jku-claim/75877 "2022-01-07T23:16:15Z")
Hi there, I’m using Auth0 to generate API tokens, but I haven’t find a way to have the jku claim provided in the generated token. The header does contain the kid claim, but no jku claim. I’d expect to have the jku point… --- ## [Anonymous User Flow](https://community.auth0.com/t/anonymous-user-flow/73792)
**Author:** [@TylerStillwater](https://community.auth0.com/u/TylerStillwater)\ **Replies:** 3\ **Last updated:** [November 26, 2021, 9:25pm UTC](https://community.auth0.com/t/anonymous-user-flow/73792 "2021-11-26T21:25:29Z")
Greetings! I am currently evaluating Auth0 for our company, and I have hit a wall that may cause us to be unable to move forward with Auth0. I am hoping that is not the case, hence the post. Essentially, we have need o… --- ## [Custom Claim missing on new Google Social Connection Signup](https://community.auth0.com/t/custom-claim-missing-on-new-google-social-connection-signup/55456)
**Author:** [@seth2](https://community.auth0.com/u/seth2)\ **Replies:** 6\ **Last updated:** [August 23, 2021, 9:08am UTC](https://community.auth0.com/t/custom-claim-missing-on-new-google-social-connection-signup/55456 "2021-08-23T09:08:33Z")
Hello everyone! TLDR; One of my rules that adds a custom claim to access tokens won’t work with a new Google signup, but works fine for regular Auth0 DB new signups. I have a statistics website with a React FE and a .N… --- ## [Architecture for implicit grant and user id](https://community.auth0.com/t/architecture-for-implicit-grant-and-user-id/65235)
**Author:** [@laughing\_man77](https://community.auth0.com/u/laughing_man77)\ **Replies:** 4\ **Last updated:** [June 30, 2021, 2:59pm UTC](https://community.auth0.com/t/architecture-for-implicit-grant-and-user-id/65235 "2021-06-30T14:59:16Z")
Hi I need a bit of advice. I’m the maintainer of a new Open Source project: ApiOpenStudio, and I’m upgrading the codebase ATM to use JWT tokens instead of the custom token stored in the DB (I know, even though it’s a sho… --- ## [How to parse roles put in custom claims in Spring Security?](https://community.auth0.com/t/how-to-parse-roles-put-in-custom-claims-in-spring-security/46801)
**Author:** [@mli](https://community.auth0.com/u/mli)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 5:06pm UTC](https://community.auth0.com/t/how-to-parse-roles-put-in-custom-claims-in-spring-security/46801 "2020-07-28T17:06:58Z")
Hi there, I’m using the Authorization extension and I created a rule to put the groups and roles of a user into a custom claim in the access token for my API, under “\[namespace\]/groups” and “\[namespace\]/roles” respective… --- ## [Lets talk about resource authorization](https://community.auth0.com/t/lets-talk-about-resource-authorization/39045)
**Author:** [@Torbjorn](https://community.auth0.com/u/Torbjorn)\ **Replies:** 1\ **Last updated:** [March 9, 2020, 11:51am UTC](https://community.auth0.com/t/lets-talk-about-resource-authorization/39045 "2020-03-09T11:51:26Z")
Introduction It is fairly easy to get a role and permission based authorization system going for an API and it is sufficient for most use cases. However, I am in need of more fine grained authorization in some of my use… --- ## [How can my backend know which company a user belongs to?](https://community.auth0.com/t/how-can-my-backend-know-which-company-a-user-belongs-to/35775)
**Author:** [@jk.chauhan](https://community.auth0.com/u/jk.chauhan)\ **Replies:** 2\ **Last updated:** [January 5, 2020, 12:42pm UTC](https://community.auth0.com/t/how-can-my-backend-know-which-company-a-user-belongs-to/35775 "2020-01-05T12:42:55Z")
Hi All, I am building an SPA with a backend API that will be used by multiple companies, with each company having several users. The problem I am facing is that if I have 2 users, one from company X and one from compan… --- ## [Mapping outgoing claims in ACTIVE DIRECTORY with ADFS connection](https://community.auth0.com/t/mapping-outgoing-claims-in-active-directory-with-adfs-connection/10744)
**Author:** [@danielfnm](https://community.auth0.com/u/danielfnm)\ **Replies:** 1\ **Last updated:** [April 10, 2018, 8:08pm UTC](https://community.auth0.com/t/mapping-outgoing-claims-in-active-directory-with-adfs-connection/10744 "2018-04-10T20:08:56Z")
Currently i have an Active Directory connected to my Auth0 account and i’m able to get this claims via IdToken ( “name”: “…”, “given\_name”: “…”, “family\_name”: “…”, “nickname”: “…”, “picture”: “…”), but i still n… --- ## [\[SPA here\] Refresh the token updating the claims (example for updating role)](https://community.auth0.com/t/spa-here-refresh-the-token-updating-the-claims-example-for-updating-role/9549)
**Author:** [@lucax88x](https://community.auth0.com/u/lucax88x)\ **Replies:** 1\ **Last updated:** [February 21, 2018, 7:37pm UTC](https://community.auth0.com/t/spa-here-refresh-the-token-updating-the-claims-example-for-updating-role/9549 "2018-02-21T19:37:06Z")
Hello guys, auth0 is so awesome :slight\_smile: We’re playing with auth0, giving him a chance, and I have a little doubt. ps: I’m aware refresh tokens should be forbidden (are forbidden?) on SPA I am about to create a … --- ## [What is the 'gty' claim and where does it come from?](https://community.auth0.com/t/what-is-the-gty-claim-and-where-does-it-come-from/9253)
**Author:** [@jgardner](https://community.auth0.com/u/jgardner)\ **Replies:** 1\ **Last updated:** [December 14, 2018, 6:01pm UTC](https://community.auth0.com/t/what-is-the-gty-claim-and-where-does-it-come-from/9253 "2018-12-14T18:01:45Z")
Hi, I’ve noticed that the ‘gty’ claim appears in all of my client credential JWTs. Is this claim documented somewhere or is it specific to some kind of add-on or Auth0 specific feature? Many thanks, James --- ## [How can I read the claims from the access token payload in java?](https://community.auth0.com/t/how-can-i-read-the-claims-from-the-access-token-payload-in-java/8210)
**Author:** [@robertocorona74](https://community.auth0.com/u/robertocorona74)\ **Replies:** 2\ **Last updated:** [January 8, 2018, 5:31pm UTC](https://community.auth0.com/t/how-can-i-read-the-claims-from-the-access-token-payload-in-java/8210 "2018-01-08T17:31:27Z")
How can I read the claims from the access token payload in java? --- ## [Access claim per user space](https://community.auth0.com/t/access-claim-per-user-space/8852)
**Author:** [@nico\_goal](https://community.auth0.com/u/nico_goal)\ **Replies:** 0\ **Last updated:** [November 29, 2017, 11:22pm UTC](https://community.auth0.com/t/access-claim-per-user-space/8852 "2017-11-29T23:22:12Z")
I have a simple To-Do mobile application in Xamarin .NET using Auth0 authentication and it is consuming an ASP.NET CORE Web API using Auth0 authorization. Application description: Every user who registers in my applica… --- ## [OnAuthorization doesnt have claims](https://community.auth0.com/t/onauthorization-doesnt-have-claims/8753)
**Author:** [@afleveri](https://community.auth0.com/u/afleveri)\ **Replies:** 0\ **Last updated:** [November 15, 2017, 5:43pm UTC](https://community.auth0.com/t/onauthorization-doesnt-have-claims/8753 "2017-11-15T17:43:49Z")
Hi, When I get my token with scopes, method OnAuthorization doesnt receive the token with scopee, What am I doing wrong? : public override void OnAuthorization(HttpActionContext actionContext) { bas… --- ## [Overwrite or set standard claim in rule](https://community.auth0.com/t/overwrite-or-set-standard-claim-in-rule/7401)
**Author:** [@simon11](https://community.auth0.com/u/simon11)\ **Replies:** 3\ **Last updated:** [October 4, 2017, 4:34am UTC](https://community.auth0.com/t/overwrite-or-set-standard-claim-in-rule/7401 "2017-10-04T04:34:17Z")
The documentation indicates that custom claims (set in rules) need to have a http\* prefix in order to be included in the final token(s). Does that imply that there is no way to set a standard claim (e.g. given\_name, tid… --- ## [Updated\_at claim has wrong type](https://community.auth0.com/t/updated-at-claim-has-wrong-type/8196)
**Author:** [@per](https://community.auth0.com/u/per)\ **Replies:** 0\ **Last updated:** [September 15, 2017, 5:00pm UTC](https://community.auth0.com/t/updated-at-claim-has-wrong-type/8196 "2017-09-15T17:00:07Z")
I have defined a test client that is OIDC conformant. The receiving end gets an updated\_at claim in the identity token of string type with an ISO datetime. However, the spec indicates that updated\_at should be the number… --- ## [Adding/Removing claims in ASP.NET Core 2.0](https://community.auth0.com/t/adding-removing-claims-in-asp-net-core-2-0/8142)
**Author:** [@Chad\_Thiele](https://community.auth0.com/u/Chad_Thiele)\ **Replies:** 0\ **Last updated:** [September 9, 2017, 10:11am UTC](https://community.auth0.com/t/adding-removing-claims-in-asp-net-core-2-0/8142 "2017-09-09T10:11:58Z")
I saw the quick start guides, got authentication and basic role based authorization working in my asp.net core 2.0 website. Is there further documentation on how to add/remove claims from users via code? There are cert… --- ## [Retrieving standard claims in idToken](https://community.auth0.com/t/retrieving-standard-claims-in-idtoken/8093)
**Author:** [@davidr1](https://community.auth0.com/u/davidr1)\ **Replies:** 8\ **Last updated:** [September 7, 2017, 10:32pm UTC](https://community.auth0.com/t/retrieving-standard-claims-in-idtoken/8093 "2017-09-07T22:32:51Z")
I want to retrieve standard claims from user meta data (gender, given name, family name) in the idToken. I’ve tried a few variations of rules with no success. How can I accomplish this? --- ## [ClaimsPrinciple=null](https://community.auth0.com/t/claimsprinciple-null/7557)
**Author:** [@nick2](https://community.auth0.com/u/nick2)\ **Replies:** 1\ **Last updated:** [July 18, 2017, 10:06am UTC](https://community.auth0.com/t/claimsprinciple-null/7557 "2017-07-18T10:06:02Z")
Not getting any access to any of the access token attributes that we see in the logs/users catergory. All we are getting when trying to access any of the componets are null values. User is successfuly being authenticated… --- ## [Email claim value doesnt exist for windows live account](https://community.auth0.com/t/email-claim-value-doesnt-exist-for-windows-live-account/6490)
**Author:** [@Apollo\_Gonzalez](https://community.auth0.com/u/Apollo_Gonzalez)\ **Replies:** 6\ **Last updated:** [May 10, 2017, 9:32pm UTC](https://community.auth0.com/t/email-claim-value-doesnt-exist-for-windows-live-account/6490 "2017-05-10T21:32:36Z")
When I log in with my outlook.com account my app crashes because there is no email claim value. When I log in with Google there are no issues. --- ## [Storing custom claims in Auth0 JWT?](https://community.auth0.com/t/storing-custom-claims-in-auth0-jwt/6523)
**Author:** [@account](https://community.auth0.com/u/account)\ **Replies:** 3\ **Last updated:** [May 9, 2017, 7:48am UTC](https://community.auth0.com/t/storing-custom-claims-in-auth0-jwt/6523 "2017-05-09T07:48:10Z")
How do I store parts of user\_metadata in a custom claim inside auth0 JWT? I added a rule which contains: function (user, context, callback) { user.user\_metadata = user.user\_metadata || {}; user.my\_claim = user.m…