SSO权限分配问题

Scopes处使用openid profile email offline_access https://xxx/api/read:posts https://xxx/api/write:posts https://xxx/api/delete:posts 但实际并不会请求对应权限，实际请求内容如下{
"key": "",
"result": "Success",
"ip": "122",
"userAgent": "ReactorNetty/1.2.13",
"userId": "",
"applicationId": "",
"params": {
"code": "",
"grant_type": "authorization_code",
"redirect_uri": "https://xxx/login/oauth2/code/sso"
},
"scope": "identities openid profile roles email",
"tokenTypes": [
"AccessToken",
"IdToken"
],
"applicationSecret": {
"name": "Default secret"
}
}
请问是当前不支持此种用法吗，需要是直接通过SSO平台来管理用户权限