OIDC Sign-in with Group Claims

Log in through the corporate identity provider and map group claims to application roles.

Requested by Lena FischerSystems EngineeringContact requesterRequested 12 Sep 2026Updated 12 Sep 2026

Wanted. Nobody has built this example yet. Lena Fischer asked for it; contact them if you have something close.

What is needed#

Several upcoming tools will sit behind the corporate identity provider rather than a local directory. We need a worked example of the authorization-code flow with PKCE that reads group claims from the ID token and maps them to roles, including what happens when the token is missing the claim.

Technologies & features#

Technologies
OpenID ConnectOAuth 2.0
Features
OpenID Connect LoginSingle Sign-On
Topics
Federated Identityprimary

Resources#

Contributes to

StatusWanted
Requested byLena Fischer
TeamSystems Engineering
Slugoidc-signin-group-claims