Can't remove user attributes from tokens #38504

tsoos99dev · 2025-03-27T12:46:11Z

tsoos99dev
Mar 27, 2025

Hi! I'm experimenting with Keycloak, and I wanted to see if I could add a new user attribute to only the ID token.

Steps so far:

I added the birthdate attribute to the user model in Realm settings.
Added a new value for the birthdate attribute to my test user.
Requested new ID and access tokens, and validated that the birthdate field is stored in the token.
Turned off the Add to access token option for the bithdate mapper in the the profile default scope's mapper config.
Requested new ID and access tokens.

I was expecting to receive an access token without the birthdate field, but it's still there, no matter what I do.

Is this expected? Am I missing some setting?

Keycloak is running in docker with default settings.
Image: quay.io/keycloak/keycloak:26.1.4