Skip to content

Commit 38ae85c

Browse files
Merge pull request #5899 from AfraHussaindeen/master_jwt-scope-array-doc
Replace 'Tenant' with 'Organization'
2 parents dabd678 + 998da6c commit 38ae85c

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

en/includes/guides/fragments/manage-app/oidc-settings/access-token.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,16 +26,17 @@
2626
}
2727
```
2828

29+
{% if product_name == "Asgardeo" or (product_name == "WSO2 Identity Server" and is_version > "7.2.0") %}
2930
!!! note
3031
By default, the `scope` claim in JWT access tokens uses a space-separated string format (e.g., `"scope": "openid profile email"`). This format complies with the **JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens ([RFC 9068](https://www.rfc-editor.org/rfc/rfc9068.html))**.
3132

3233
You can change this to a JSON array format (e.g., `"scope": ["openid", "profile", "email"]`), but this is **not recommended** as it deviates from the standard specification.
3334

3435
If you still require this configuration, it can be applied at two levels:
3536

36-
- **Application level**: Set the `enableJwtScopeAsArray` property in the application's `accessToken` configuration via the [Application Management API]({{base_path}}/apis/{% if product_name == "Asgardeo" %}application-management{% else %}application-rest-api{% endif %}/). This overrides the tenant-level setting for the specific application.
37+
- **Application level**: Set the `enableJwtScopeAsArray` property in the application's `accessToken` configuration via the [Application Management API]({{base_path}}/apis/{% if product_name == "Asgardeo" %}application-management{% else %}application-rest-api{% endif %}/). This overrides the organization-level setting for the specific application.
3738
{% if product_name == "WSO2 Identity Server" %}
38-
- **Tenant level**: Use the [Server Configuration API]({{base_path}}/apis/configs-rest-api/#tag/Inbound-Authentication-Configurations/operation/updateOAuth2InboundAuthConfig) to set the `enableJwtScopeAsArray` property. This applies to all applications in the tenant unless overridden at the application level.
39+
- **Organization level**: Use the [Server Configuration API]({{base_path}}/apis/configs-rest-api/#tag/Inbound-Authentication-Configurations/operation/updateOAuth2InboundAuthConfig) to set the `enableJwtScopeAsArray` property. This applies to all applications in the organization unless overridden at the application level.
3940
{% endif %}
4041
{% if product_name == "Asgardeo" %}
4142
- **Organization level**: Set the `enableJwtScopeAsArray` property via the following API. This applies to all applications in the organization unless overridden at the application level.
@@ -51,6 +52,7 @@
5152
}'
5253
```
5354
{% endif %}
55+
{% endif %}
5456

5557
{% if product_name == "Asgardeo" or (product_name == "WSO2 Identity Server" and is_version != "7.0.0") %}
5658
#### Access Token Attributes

0 commit comments

Comments
 (0)