Name and Email in Access Token claims not reaching the resource server

I can get access and id tokens from my auth server. Both tokens include the name and email claims. The access token is added to the header for making calls to the resource server. The resource server uses introspection to validate the token.

The user is authenticated as expected. So I try to get the name and email for the user by doing:

    var data = new {
        Email = User.GetClaim(OpenIdConnectConstants.Claims.Email),
        Name = User.Identity.Name
    };

But both properties are null. This the ClaimsPrincipal:

There are only 8 claims and none of them and the email and name.

Where and how can I get these claims in the resource server?

[cryo75]

It works with scopes.

[kevinchalet]

You can use scopes for that. Take a look at the samples to see how it’s done.