Mediaflow asks for the scopes openid, profile and email, and for groups when your order uses groups. Allow them for the application.
Mediaflow reads these claims, first from the userinfo response and then from the ID token:
| Claim | Value |
|---|---|
sub |
The user's unique ID, which Mediaflow matches users by |
email |
The user's email address |
given_name |
The user's first name |
family_name |
The user's last name |
name |
The user's full name |
If your identity provider has no
groupsscope, or needs other scopes to send these claims, reply in your ticket with the scopes Mediaflow should ask for.