shenxin | 2024-11-07 20:35:54 UTC | #1
From this document, I can tell Genesys pull familyname and givenname from IDP to replace "No name" at agent side.
However, I found out for my IDP (AWS Cognito) will not include familyname, givenname in the authentication token. Here is my auth token payload, you can see profile is in the requested scope, which will give permission for familyname, givenname attributes.
{
"sub": "4ab1c09a-7619-4680-9859-ac71f9f2e13b",
"cognito:groups": [
"us-west-2_VHmWO3njV_Google"
],
"iss": "https://cognito-idp.us-west-2.amazonaws.com/us-west-2_VHmWO3njV",
"version": 2,
"client_id": "6mppkfle835ucucrhg1orh2rp5",
"origin_jti": "995a88fd-3fb2-46c9-928b-3b387a9acafb",
"token_use": "access",
"scope": "aws.cognito.signin.user.admin openid profile email",
"auth_time": 1730930646,
"exp": 1731017046,
"iat": 1730930646,
"jti": "8136754e-b7bf-446b-b714-71fec75d8e1b",
"username": "google_103262348320838616042"
}
The actually familyname, givenname is provided in the user info endpoint, https://auth-stage.spotnana.com/oauth2/userinfo You(Genesys authenticated messaging) has to make request to this endpoint to get it. This endpoint is available in the discovery URL(https://cognito-idp.us-west-2.amazonaws.com/us-west-2_VHmWO3njV/.well-known/openid-configuration) which is provided to Genesys setup for this deployment.
My question is will Genesys pull user name from userinfo endpoint? or it only looks for them in token. If only in token, it is a blocker for me since I have no control for token content.
vpirat | 2024-11-07 21:19:02 UTC | #2
Hi,
yes, claims will be retrieved from the user_info endpoint if not available from tokens.
Regards, V.P.
system | 2024-12-07 21:19:43 UTC | #3
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
This post was migrated from the old Developer Forum.
ref: 30262