Referencing string array claims from OIDC ID token

mk_kmx — Fri, 21 Feb 2025 09:16:14 GMT

Hi,

The discussed system is configured to authenticate users via OIDC on on-premise Qlik Sense (Windows) deployment. For various reasons we need to use a verified_primary_email claim, which comes from Azure AD via ID token in a form of string array, even though it's a single value, e.g.

{
  ...,
  "verified_primary_email": [
    "user.name@domain.com"
  ],
  ...
}

I managed to verify the claims in token manually, so error on that side is pretty improbable.

Any idea how to reference this in Virtual Proxy claim mapping configuration? I couldn't find this anywhere in the documentation, nor in the related Qlik Support Article. @Damien_V @Sonja_Bauernfeind can you possibly help here?

EDIT: I've tried following options, without success (always ended up with the same generic error message related to OIDC):

verified_primary_email
verified_primary_email[0]
verified_primary_email[1]
verified_primary_email(0)
verified_primary_email(1)
verified_primary_email.0
verified_primary_email.1

Many thanks!

Martin

topic Referencing string array claims from OIDC ID token in Management & Governance

Referencing string array claims from OIDC ID token