# \#oidc **URL:** https://community.auth0.com/tag/oidc/159.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Access token with custom API scopes through Implicit Flow?](https://community.auth0.com/t/access-token-with-custom-api-scopes-through-implicit-flow/200692)
**Author:** [@Adelin](https://community.auth0.com/u/Adelin)\ **Replies:** 1\ **Last updated:** [June 10, 2026, 12:12am UTC](https://community.auth0.com/t/access-token-with-custom-api-scopes-through-implicit-flow/200692 "2026-06-10T00:12:14Z")
I am wondering whether it is possible to get an user access token with a custom scope for an API that is configured to allow all apps for User-Delegated Access. I tried to just add the scope in the /authorize request, b… --- ## [Auth0 pass 'state' paramater through Logout endpoint](https://community.auth0.com/t/auth0-pass-state-paramater-through-logout-endpoint/198140)
**Author:** [@michaela-sb](https://community.auth0.com/u/michaela-sb)\ **Replies:** 1\ **Last updated:** [March 17, 2026, 5:57pm UTC](https://community.auth0.com/t/auth0-pass-state-paramater-through-logout-endpoint/198140 "2026-03-17T17:57:51Z")
The logout function from the Auth0 JavaScript SPA SDK redirects to the /v2/logout Auth0 endpoint, but I need to use the OIDC endpoint /oidc/logout instead so I can access the ‘state’ paramater, which as far as I can tell… --- ## [Python Token Validation](https://community.auth0.com/t/python-token-validation/196326)
**Author:** [@jonathan.hughes](https://community.auth0.com/u/jonathan.hughes)\ **Replies:** 2\ **Last updated:** [January 30, 2026, 9:57pm UTC](https://community.auth0.com/t/python-token-validation/196326 "2026-01-30T21:57:56Z")
I have a react single page app working to login and I get the token with the following method: const token = await getAccessTokenSilently(); I then pass this token into a back end python server but I need to make sure … --- ## [{organization\_name} based Redirect URI with Apache](https://community.auth0.com/t/organization-name-based-redirect-uri-with-apache/194776)
**Author:** [@BitshiftNate](https://community.auth0.com/u/BitshiftNate)\ **Replies:** 1\ **Last updated:** [November 24, 2025, 8:18pm UTC](https://community.auth0.com/t/organization-name-based-redirect-uri-with-apache/194776 "2025-11-24T20:18:47Z")
Hello all, I’m currently in the process of creating a B2B SaaS application that requires each customer to have a separate tenant which is an entirely separate server. I’m running an Apache server to host the front-end … --- ## [Any workadounds for Safari ITP issue with transaction cookie when using express-openid-connect?](https://community.auth0.com/t/any-workadounds-for-safari-itp-issue-with-transaction-cookie-when-using-express-openid-connect/150940)
**Author:** [@mhautala](https://community.auth0.com/u/mhautala)\ **Replies:** 4\ **Last updated:** [November 12, 2024, 3:31pm UTC](https://community.auth0.com/t/any-workadounds-for-safari-itp-issue-with-transaction-cookie-when-using-express-openid-connect/150940 "2024-11-12T15:31:01Z")
We have faced issue which seems to be related to Safari’s Intelligent Tracking Protection functionality when using express-openid-connect library. Safari may drop the transaction cookie auth\_verification when browser is… --- ## [Modifying ID token](https://community.auth0.com/t/modifying-id-token/141143)
**Author:** [@richardb](https://community.auth0.com/u/richardb)\ **Replies:** 3\ **Last updated:** [August 15, 2024, 8:29pm UTC](https://community.auth0.com/t/modifying-id-token/141143 "2024-08-15T20:29:06Z")
Hello, I modify some user information using the management API, but then I also want my ID token to be updated. Can I directly modify my current ID token, or do I need to request a new one from auth0? Thank you and hav… --- ## [Got "502 Bad Gateway" on login callback when using NGINX reverse proxy](https://community.auth0.com/t/got-502-bad-gateway-on-login-callback-when-using-nginx-reverse-proxy/116896)
**Author:** [@michael.samorokov](https://community.auth0.com/u/michael.samorokov)\ **Replies:** 2\ **Last updated:** [September 23, 2023, 7:25am UTC](https://community.auth0.com/t/got-502-bad-gateway-on-login-callback-when-using-nginx-reverse-proxy/116896 "2023-09-23T07:25:12Z")
hello! I’m trying to integrate ASP.NET Core application with Auth0. I’m using Auth0.AspNetCore.Authentication NuGet package following tutorial documentation by @andrea.chiarelli . It works fine when I’m trying locally… --- ## [Is Nonce requried for the Authoziation Code flow](https://community.auth0.com/t/is-nonce-requried-for-the-authoziation-code-flow/111419)
**Author:** [@IvanM](https://community.auth0.com/u/IvanM)\ **Replies:** 1\ **Last updated:** [July 20, 2023, 2:31pm UTC](https://community.auth0.com/t/is-nonce-requried-for-the-authoziation-code-flow/111419 "2023-07-20T14:31:45Z")
Hello community, I’m implementing Authoziation Code flow via NodeJS Lambda AWS and I have a question about the Nonce. Is it needed when using the Authorization Flow? If not, could please help me to find some official … --- ## [JWT Missing Payload](https://community.auth0.com/t/jwt-missing-payload/105978)
**Author:** [@ademolaafolabi](https://community.auth0.com/u/ademolaafolabi)\ **Replies:** 1\ **Last updated:** [May 2, 2023, 10:38pm UTC](https://community.auth0.com/t/jwt-missing-payload/105978 "2023-05-02T22:38:02Z")
We’re having trouble with the Authorization Code Flow + PKCE with Auth0. The client is using the getCredentials hook in the React Native library and sending the access token to our API but the payload/data portion of th… --- ## [Logout users from other devices](https://community.auth0.com/t/logout-users-from-other-devices/104303)
**Author:** [@murtaza.ghulam](https://community.auth0.com/u/murtaza.ghulam)\ **Replies:** 1\ **Last updated:** [April 24, 2023, 9:27am UTC](https://community.auth0.com/t/logout-users-from-other-devices/104303 "2023-04-24T09:27:53Z")
I am developing a subscription-based application that utilizes Auth0 for authentication. I have noticed that some organizations are sharing a single user’s credentials instead of purchasing additional licenses, which is … --- ## [Conform to OpenID logout specification](https://community.auth0.com/t/conform-to-openid-logout-specification/82498)
**Author:** [@bgustafson](https://community.auth0.com/u/bgustafson)\ **Replies:** 5\ **Last updated:** [April 12, 2023, 1:55pm UTC](https://community.auth0.com/t/conform-to-openid-logout-specification/82498 "2023-04-12T13:55:20Z")
The logout endpoint (/v2/logout) does not seem to conform to the OIDC specification, which says that the redirect URL should be defined in the post\_logout\_redirect\_uri parameter: However, Auth0 is using a returnTo para… --- ## [Clarification on what an "enterprise connection" is](https://community.auth0.com/t/clarification-on-what-an-enterprise-connection-is/91406)
**Author:** [@abrahamlincolnblockc](https://community.auth0.com/u/abrahamlincolnblockc)\ **Replies:** 1\ **Last updated:** [September 28, 2022, 1:26pm UTC](https://community.auth0.com/t/clarification-on-what-an-enterprise-connection-is/91406 "2022-09-28T13:26:20Z")
Hi there, I’m a developer looking to implement SSO for our company. I see under the B2B tier on the pricing page that both the “essentials” plan and the “professional” plan come with only 3 enterprise connections, and I … --- ## [Appropriate token usage for 1p webapp](https://community.auth0.com/t/appropriate-token-usage-for-1p-webapp/91333)
**Author:** [@pdewilde](https://community.auth0.com/u/pdewilde)\ **Replies:** 1\ **Last updated:** [September 27, 2022, 11:04pm UTC](https://community.auth0.com/t/appropriate-token-usage-for-1p-webapp/91333 "2022-09-27T23:04:41Z")
I have a traditional web application, and I am planning on using auth0 for its support for multiple social logins. Authorization will not be done using JWT claims, as there are scenarios where a user could have many dif… --- ## [Automatically assign roles to federated OIDC users](https://community.auth0.com/t/automatically-assign-roles-to-federated-oidc-users/88217)
**Author:** [@k01157](https://community.auth0.com/u/k01157)\ **Replies:** 4\ **Last updated:** [August 6, 2022, 5:07pm UTC](https://community.auth0.com/t/automatically-assign-roles-to-federated-oidc-users/88217 "2022-08-06T17:07:58Z")
Hi, I use an OpenID Connect enterprise connection to federate users. The returned ID-token contains a custom claim that represents the roles of the given user. I want to dynamically map the content of this id-token claim… --- ## [Custom user database with oidc](https://community.auth0.com/t/custom-user-database-with-oidc/86138)
**Author:** [@mattymillar](https://community.auth0.com/u/mattymillar)\ **Replies:** 5\ **Last updated:** [June 30, 2022, 3:23pm UTC](https://community.auth0.com/t/custom-user-database-with-oidc/86138 "2022-06-30T15:23:47Z")
I have a database with existing users and I want to be able to log them in with oidc. They were not registered via Auth0. I have added a custom-database connection and a login action script that works, but if I add oidc… --- ## [Oidc callback from systems with dynamic url](https://community.auth0.com/t/oidc-callback-from-systems-with-dynamic-url/85931)
**Author:** [@jmls1](https://community.auth0.com/u/jmls1)\ **Replies:** 1\ **Last updated:** [June 27, 2022, 7:39pm UTC](https://community.auth0.com/t/oidc-callback-from-systems-with-dynamic-url/85931 "2022-06-27T19:39:27Z")
we’re using gitpod to start our development environment. Each workspace started gets a different, randomized url The app we’re developing uses Auth0 oidc as the authentication , however, the callbacks have to be a fixe… --- ## [Saving custom claims to app\_metadata](https://community.auth0.com/t/saving-custom-claims-to-app-metadata/81066)
**Author:** [@borja.roux](https://community.auth0.com/u/borja.roux)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 7:09pm UTC](https://community.auth0.com/t/saving-custom-claims-to-app-metadata/81066 "2022-04-04T19:09:38Z")
I have created an enterprise connection to allow users to authenticate on a third-party OIDC IDP. This IDP generates identity tokens with custom claims. I need to store those claims in the user’s app\_metadata at each log… --- ## [Auth0 OidcClient and fixed length of Access Token & Authorization Code](https://community.auth0.com/t/auth0-oidcclient-and-fixed-length-of-access-token-authorization-code/79512)
**Author:** [@HueyLake](https://community.auth0.com/u/HueyLake)\ **Replies:** 3\ **Last updated:** [March 11, 2022, 4:55pm UTC](https://community.auth0.com/t/auth0-oidcclient-and-fixed-length-of-access-token-authorization-code/79512 "2022-03-11T16:55:04Z")
Hi everyone, for a Xamarin project we are using Auth0.OidcClient last stable packages (3.2.4 for core and Android, 3.3.4 for iOS). We are seeing deprecation notices about the migration to variable size access tokens an… --- ## [How do I get custom Roles with OIDC and JWT](https://community.auth0.com/t/how-do-i-get-custom-roles-with-oidc-and-jwt/79421)
**Author:** [@jgleason](https://community.auth0.com/u/jgleason)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 12:04am UTC](https://community.auth0.com/t/how-do-i-get-custom-roles-with-oidc-and-jwt/79421 "2022-03-08T00:04:39Z")
I am using OAuth2 Proxy to get the authorization header with the ID token and user information. However, I can’t seem to find the custom role I assigned to the user. My ID Token looks like this… { given\_name: '...', … --- ## [refreshToken missing from request.oidc](https://community.auth0.com/t/refreshtoken-missing-from-request-oidc/75849)
**Author:** [@Ashish\_Dwivedi](https://community.auth0.com/u/Ashish_Dwivedi)\ **Replies:** 2\ **Last updated:** [January 6, 2022, 3:12am UTC](https://community.auth0.com/t/refreshtoken-missing-from-request-oidc/75849 "2022-01-06T03:12:30Z")
I’ve created a Regular Web Application for an Express-NodeJS application using express-openid-connect. The config for auth is like this: "authConfig": { "authorizationParams": { "response\_type": "code", … --- ## [Namespaced claim replaces period (.) with colon (:)](https://community.auth0.com/t/namespaced-claim-replaces-period-with-colon/59773)
**Author:** [@blake.thomson](https://community.auth0.com/u/blake.thomson)\ **Replies:** 4\ **Last updated:** [May 21, 2021, 7:55am UTC](https://community.auth0.com/t/namespaced-claim-replaces-period-with-colon/59773 "2021-05-21T07:55:57Z")
I’m using a rule to include a custom namespaced claim (e.g. https://example.com/claim) in the idToken, per the guidelines here: Create Custom Claims. This works great; when I test out my login flow I see "https://example… --- ## [An error occurred during login: sub claim is missing from userinfo endpoint](https://community.auth0.com/t/an-error-occurred-during-login-sub-claim-is-missing-from-userinfo-endpoint/59128)
**Author:** [@msavard](https://community.auth0.com/u/msavard)\ **Replies:** 3\ **Last updated:** [March 9, 2021, 9:04pm UTC](https://community.auth0.com/t/an-error-occurred-during-login-sub-claim-is-missing-from-userinfo-endpoint/59128 "2021-03-09T21:04:46Z")
IdentityModel.OidcClient version: 4.0.0-preview.7 and lower same problem too WinForm .Net 5.0 In Auth0ClientBase.cs, when I call var result = await OidcClient.LoginAsync(loginRequest, cancellationToken); I always rec… --- ## [Native app UWP Universal login returns BadRequest on wrong password but Classic login works](https://community.auth0.com/t/native-app-uwp-universal-login-returns-badrequest-on-wrong-password-but-classic-login-works/56842)
**Author:** [@cbentley](https://community.auth0.com/u/cbentley)\ **Replies:** 2\ **Last updated:** [February 12, 2021, 1:52pm UTC](https://community.auth0.com/t/native-app-uwp-universal-login-returns-badrequest-on-wrong-password-but-classic-login-works/56842 "2021-02-12T13:52:06Z")
I created a UWP app with the Auth0.OidcClient.UWP Nuget package, as the quickstart for UWP shows. The app was configured with Universal login on the dashboard by default. It works fine if you enter the credentials correc… --- ## [OIDC Connection and Username/password is only showing username and password fields on login](https://community.auth0.com/t/oidc-connection-and-username-password-is-only-showing-username-and-password-fields-on-login/49726)
**Author:** [@garethpp](https://community.auth0.com/u/garethpp)\ **Replies:** 2\ **Last updated:** [September 14, 2020, 2:24pm UTC](https://community.auth0.com/t/oidc-connection-and-username-password-is-only-showing-username-and-password-fields-on-login/49726 "2020-09-14T14:24:45Z")
Hi, I’m new to Auth0 but am trying to make a quick PoC for a prospective client. The aim is to show them how we can connect an Auth0 app to our OIDC IdP, but also allow their users to log in with username and password i… --- ## [Custom State persistence and validation using Asp.net core Open Id Connect (OIDC) middleware](https://community.auth0.com/t/custom-state-persistence-and-validation-using-asp-net-core-open-id-connect-oidc-middleware/45502)
**Author:** [@rramirez](https://community.auth0.com/u/rramirez)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 2:41am UTC](https://community.auth0.com/t/custom-state-persistence-and-validation-using-asp-net-core-open-id-connect-oidc-middleware/45502 "2020-06-30T02:41:37Z")
Hey everyone, I’m attempting to persist some application state across my Auth0 authentication request, but I’m having trouble finding documentation surrounding how to do it. I’m using the following technologies: Asp.n… --- ## [Logging out with a connection from another auth0 tenant (auth0-oidc)](https://community.auth0.com/t/logging-out-with-a-connection-from-another-auth0-tenant-auth0-oidc/20994)
**Author:** [@nbhana](https://community.auth0.com/u/nbhana)\ **Replies:** 1\ **Last updated:** [February 17, 2019, 11:29am UTC](https://community.auth0.com/t/logging-out-with-a-connection-from-another-auth0-tenant-auth0-oidc/20994 "2019-02-17T11:29:50Z")
Hey team! My organization has 2 tenants, one for our staff and one for our users. We have a mobile app that has a login screen with 2 separate buttons. One is for the user login and one is for the staff login. Our st… --- ## [Best practices for authenticating API requests from domains you don't control](https://community.auth0.com/t/best-practices-for-authenticating-api-requests-from-domains-you-dont-control/19648)
**Author:** [@jcochrane](https://community.auth0.com/u/jcochrane)\ **Replies:** 4\ **Last updated:** [January 11, 2019, 2:47pm UTC](https://community.auth0.com/t/best-practices-for-authenticating-api-requests-from-domains-you-dont-control/19648 "2019-01-11T14:47:42Z")
I’m trying to figure out best practices for authenticating API requests from domains that I don’t control, and I’d appreciate some guidance. My setup: We have a web app that uses Auth0 for IAM. The web app exposes an AP… --- ## [React Native & AWS Auth Federation?](https://community.auth0.com/t/react-native-aws-auth-federation/15420)
**Author:** [@coreyh](https://community.auth0.com/u/coreyh)\ **Replies:** 7\ **Last updated:** [September 17, 2018, 12:01pm UTC](https://community.auth0.com/t/react-native-aws-auth-federation/15420 "2018-09-17T12:01:30Z")
I have SAML SSO configured via the docs here https://auth0.com/docs/integrations/aws/sso So now the question is can the RN Auth0 module here GitHub - auth0/react-native-auth0: React Native toolkit for Auth0 API · GitHub … --- ## [Cannot return required scope](https://community.auth0.com/t/cannot-return-required-scope/9485)
**Author:** [@seqq86](https://community.auth0.com/u/seqq86)\ **Replies:** 4\ **Last updated:** [February 15, 2018, 3:57pm UTC](https://community.auth0.com/t/cannot-return-required-scope/9485 "2018-02-15T15:57:07Z")
Hi, I use non-OIDC authentication and I am requesting scope user\_metadata. Also I have rule: function (user, context, callback) { user.user\_metadata = user.user\_metadata || {}; user.user\_metadata.signu… --- ## [Xamarin Android custom error description from rule is hidden](https://community.auth0.com/t/xamarin-android-custom-error-description-from-rule-is-hidden/9397)
**Author:** [@Pistoolirapu](https://community.auth0.com/u/Pistoolirapu)\ **Replies:** 1\ **Last updated:** [February 10, 2018, 12:47am UTC](https://community.auth0.com/t/xamarin-android-custom-error-description-from-rule-is-hidden/9397 "2018-02-10T00:47:12Z")
It is hard to understand how it is meant to sort out the custom error message from rules while creating app with Xamarin for Android. Here is example of rule to be used to return custom error message: function (user, c… [Next page](https://community.auth0.com/tag/oidc/159.md?match_all_tags=true&page=1&tags%5B%5D=oidc)