2 replies

access groups with nested OIDC claims

Hi, I would like to create an access group in Cloudflare Access based on an OIDC claim that is stored within an object inside an array. For example:

{
  "email": "user@example.com",
  "oidc_fields": {
    "sub": "user-unique-id",
    "role": [
      {
        "description": "role description goes here",
        "teamId": "abcd/3412"
      }
    ]
  }
}

{
  "email": "user@example.com",
  "oidc_fields": {
    "sub": "user-unique-id",
    "role": [
      {
        "description": "role description goes here",
        "teamId": "abcd/3412"
      }
    ]
  }
}

I would like to create a rule so that only users who have a specific role description and belong to a specific team will be part of the access group. Users can have multiple roles in various teams, which is why it's an array. I don’t have control over the service providing these values, so I can't change the user identity structure even if I wanted to.
Is it possible to access the claim in the "Claim name" section in this case? Thanks in advance for any help!

Cloudflare Developers•2y ago•

2 replies

affinetform3d

access groups with nested OIDC claims

Hi, I would like to create an access group in Cloudflare Access based on an OIDC claim that is stored within an object inside an array. For example:

{
  "email": "user@example.com",
  "oidc_fields": {
    "sub": "user-unique-id",
    "role": [
      {
        "description": "role description goes here",
        "teamId": "abcd/3412"
      }
    ]
  }
}

{
  "email": "user@example.com",
  "oidc_fields": {
    "sub": "user-unique-id",
    "role": [
      {
        "description": "role description goes here",
        "teamId": "abcd/3412"
      }
    ]
  }
}

access groups with nested OIDC claims

Similar Threads

access groups with nested OIDC claims

Similar Threads

Similar Threads

Similar Threads