Claims & Authority Prefixes

Authority Prefixes

These prefixes are added to user attributes when building the JWT authorities array.

Core Attribute Prefixes
Custom Attribute Prefixes

Add prefixes for custom user attributes. If a user's custom attribute key matches one of these, it will be added to authorities.

Claims Preview
Authorities
Claims

                


                

                    
                    Select a user to preview their claims
                

            

        


        
        

            

                How Claims Work
            

            

                
User attributes are mapped to JWT claims and authorities:

                

                    
                        

                            User Attribute
                            JWT Claim
                            Authority Example
                        

                    
                    
                        

                            roles
                            roles
                            ROLE_ADMIN
                        

                        

                            identity_class
                            identity_class
                            IDENTITY_INTERNAL
                        

                        

                            entitlements
                            entitlements
                            ENT_DOCUMENT_READ
                        

                        

                            source_acl
                            source_acl
                            ACL_READ (no prefix)
                        

                        

                            attributes.*
                            attributes.{key}
                            Uses custom prefix if configured