graeme varga is requesting for entra id using authorization coce flow, decode the id token, and take an arbitrary claim (e.g. employeeID) and use that as a subject identifier or id.

 

oidc userinfo

• access token back from authn, make call to userinfo endpoint

authorization code flow

• id token jwt

oidc debugger.com

• uri is from idp
• client id from idp (entra id)
• openid scope
• implicit flow

• id token (jwt)
  payload: employeeID

 

Note to update: https://spaces.at.internet2.edu/display/Grouper/OIDC+authentication+to+Grouper+UI