Referencing string array claims from OIDC ID token

[mk_kmx]

Hi,

The discussed system is configured to authenticate users via OIDC on on-premise Qlik Sense (Windows) deployment. For various reasons we need to use a verified_primary_email claim, which comes from Azure AD via ID token in a form of string array, even though it's a single value, e.g.

{
  ...,
  "verified_primary_email": [
    "user.name@domain.com"
  ],
  ...
}

I managed to verify the claims in token manually, so error on that side is pretty improbable.

Any idea how to reference this in Virtual Proxy claim mapping configuration? I couldn't find this anywhere in the documentation, nor in the related Qlik Support Article. @Damien_V  @Sonja_Bauernfeind can you possibly help here?

EDIT: I've tried following options, without success (always ended up with the same generic error message related to OIDC):

• verified_primary_email
• verified_primary_email[0]
• verified_primary_email[1]
• verified_primary_email(0)
• verified_primary_email(1)
• verified_primary_email.0
• verified_primary_email.1

Many thanks!

Martin