Can I Preprocess OIDC Claims in SystemLink?

Issue Details

• I am using OIDC in SystemLink for authentication. Does SystemLink provide any functionality to manipulate or modify Claims so that they exactly match my role and workspace mappings?
• My OIDC Claims do not exactly match the value I require. Can I pre-process or post-process these values in SystemLink to match the required structure?

Solution

SystemLink does not offer any mechanism to pre-process or post-process Claim values. Most OpenID Connect (OIDC) Providers have some capability in this direction, so it should be handled on the OIDC Provider side.

Additional Information

To assign User Claims to Roles and Workspaces, the following caveats must be considered:

• All string values are case sensitive.
• If the Claim value is a scalar, it must exactly match the value you specify in the Role mapping.
• If the Claim value is an array, one of the array elements must exactly match the value you specify in the Role mappings.
• If the Claim value contains quotes, you must escape the quotation marks with a backslash.