1

Within the ConnectedApp Metadata API, it has a setting nested under oauthConfig called idTokenConfig, of the type ConnectedAppOauthIdToken.

The ConnectedAppOauthIdToken class has five different fields:

  1. idTokenAudience
  2. idTokenIncludeAttributes
  3. idTokenIncludeCustomPerms
  4. idTokenIncludeStandardClaims
  5. idTokenValidity

Question: Where do I see these settings on my connected app from within the Salesforce UI and where can I adjust them?

2 Answers 2

2

The ID token (aka id_token) is issued in OpenID Connect(OIDC)-compliant flows. The token could contain standard claims (defined by OIDC spec) as well as custom claims. Out of the box, Salesforce supports two types of custom claims - claims based on SF profile permissions and claims based on User attributes. The former is represented by Custom Permissions checkbox in connected app UI and the latter is Custom Claims.

In addition to having the right params to trigger the flow, you have to explicitly configure the id token in the connected app. This is done by first selecting Enable oAuth Settings in the connected app and then selecting Configure ID Token in oAuth settings.

1
  • 1
    Thank you, really helpful to know. This was all really just an attempt to get the IP Relaxation settings in the manage connected app settings. See this post here and would love your input if you have any ideas Commented Feb 24, 2020 at 19:48
0

More details can be found here

ConnectedAppOauthIdToken

Specifies the ID token configuration for the connected app OAuth settings. Available in API version 43.0 and later.

enter image description here

1
  • This is what I linked and was referring to. I want to know where do I see these settings for the connected app within the Salesforce UI Commented Feb 24, 2020 at 18:46

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .