Claims query parameter support #44593

vvc-git · 2025-12-01T22:20:56Z

vvc-git
Dec 1, 2025

In the OIDC specification, the claims parameter (see section 5.5: OIDC Core) allows requesting specific claims in the ID Token or from the UserInfo endpoint.

When I send a request to Keycloak like:

http://<keycloak-server>/realms/<realm-name>/protocol/openid-connect/auth?
client_id=<client-id>
&redirect_uri=<redirect-uri>
&response_type=code
&scope=openid profile
&claims=%7B%22userinfo%22%3A%7B%22<claim-name>%22%3A%7B%22essential%22%3Atrue%7D%7D%7D

I notice that Keycloak returns all claims mapped to the user, not only the ones requested in the claims parameter.

Question:
Does Keycloak fully support filtering claims via the claims query parameter, or is it expected behavior that all mapped claims are returned regardless of what is requested? If it is supported, how can we configure Keycloak to return only the requested claims?

Navigation Menu

Repository navigation

Claims query parameter support #44593

Uh oh!

{{title}}

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

Claims query parameter support #44593

Uh oh!

vvc-git Dec 1, 2025

Replies: 0 comments

vvc-git
Dec 1, 2025