goauthentik / goauthentik/authentik
Add claim to only ID Token
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 644
Description
**Describe your question/**
I am trying to implement avatar support using a custom attribute as described in [System Setting](https://docs.goauthentik.io/docs/core/settings). I've updated my backend to allow setting this avatar by saving base64 encoded images in this custom attribute. However, it appears this attribute isn't automatically added to the ID token. Thus, I've setup a property mapping and added the scope to my provider. This works, however, the (1mb) base64 encoded photo is now included in both the ID Token and Access token. Other IdPs allow you to specify which token you'd like the claim to be present on as it's pretty inefficient to pass such as large token to backends for user authn/z when that claim is only needed on the UI side for me. Is this possible in Authentik?
**Version and Deployment (please complete the following information):**
- authentik version: 2024.6.4
- Deployment: helm
Contributor guide
Assessment
This issue has not been assessed yet.