Custom claims not in id_token or /userinfo response

I can’t seem to get custom claims to show up in the id_token nor the /userinfo response.

Here’s my configuration:

  mock-idp:
    image: soluto/oidc-server-mock:0.1.2
    ports:
      - "4014:80"
    environment:
      CLIENTS_CONFIGURATION_INLINE: |
        [
          {
            "AllowAccessTokensViaBrowser": true,
            "AllowedGrantTypes": [
              "authorization_code",
              "refresh_token"
            ],
            "AllowedScopes": [
              "openid",
              "profile",
              "email"
            ],
            "AllowPlainTextPkce": true,
            "AlwaysIncludeUserClaimsInIdToken": true,
            "ClientId": "example-client",
            "ClientSecrets": [
              "example-password"
            ],
            "RedirectUris": [
              "http://client.docker:5050/idp/callback/"
            ],
            "RequirePkce": false
          }
        ]
      USERS_CONFIGURATION_INLINE: |
        [
          {
            "SubjectId": "1",
            "Username": "test",
            "Password": "test",
            "Claims": [
              {
                "Type": "name",
                "Value": "test"
              },
              {
                "Type": "email",
                "Value": "[e-mail]"
              },
              {
                "Type": "email_verified",
                "Value": true
              },
              {
                "Type": "preferred_username",
                "Value": "test"
              }
            ]
          }
        ]

Notice I’ve defined two custom claims above; name and preferred_username.

Here’s the id_token:

{
    'amr': ['pwd'],
    'at_hash': 'IBXeLLcfPJPGnAGUmsudgA',
    'aud': 'shipshop',
    'auth_time': 1596564870,
    'email': '[e-mail]',
    'email_verified': 'True',
    'exp': 1596565170,
    'iat': 1596564870,
    'idp': 'local',
    'iss': 'http://mock-idp.docker:4014',
    'nbf': 1596564870,
    'nonce': '1jhAyqmvisvHxUj8JGjiu73vxt4JwqDr',
    'sid': '827658dc41ab9de2f8801c6ebd3ff29e',
    'sub': '1'
}

Notice name and preferred_username are not present.

And the /userinfo response:

{
    'email': '[e-mail]',
    'email_verified': 'True',
    'sub': '1'
}

Notice name and preferred_username are not present.

I must be misunderstanding something, any help appreciated!

[cburmeister]

@AleF83 that worked!

I was also able to get the custom claims working by creating a custom identity resource.

Thanks for all your help!

[AleF83]

@cburmeister Ok, after some digging I have the solution. I misled you in my previous answer. To turn cookies SameSite mode to Lax you need to add the following line in SERVER_OPTIONS_ONLINE env var or to file mapped withSERVER_OPTIONS_PATH env var.

{
  "Authentication": {
    "CookieSameSiteMode": "Lax",
    "CheckSessionCookieSameSiteMode": "Lax"
  }
}

These env vars allows you to configure the top level of IdentityServer. The value is deserialized to IdentityServerOptions