Skip to content

EOSC requirements - Missing scopes/claims #1171

@DonaldChung-HK

Description

@DonaldChung-HK

According to EOSC AAI Architecture 2025 document (https://zenodo.org/records/15388270), some of the required claims don’t exist on INDIGO IAM aarc profile:

  • name, given_name, family_name, email needs to be on introspection response (they already exist in others)
  • schac_home_organization needs to be on both userinfo and introspection resposnes
  • voperson_external_affiliation needs to be on both userinfo and introspection responses (could the eduperson_scoped_affiliation be reused?)
  • sub claim needs to be equal to the voperson_id claim and this means it needs to be scoped too.

This last fix isn’t backwards compatible as the sub would change, but this is needed for following the AARC guideline.

Metadata

Metadata

Type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions