Damien TEMPLER
·PS at Memority

OIDC scope different between Production & Stage

Unresolved

Hi,

Our customer showed us that the same scope does not behave equally between stage and production environments.

The scope is a meant to be a list of organization IDs.

  • Production returns a string: "AA0000, BB1234, CC4567"

  • Stage returns a list: ["AA0000", "BB1234", "CC4567"]

All configurations seem to be identical:

  • The corresponding attribute in MemorityReporting is a list on both environments (in both "application" files, the attribute is multivalued)

  • The corresponding attribute (iamUserCustomMulti...) in MemorityAuthentication is a list on both environments (in both "application" files, the attribute is multivalued)

  • The access attributes are configured equally (multivalued, same index)

  • Both federations are configured equally (same scope points to same attribute)

  • All referenced objects still exist

What could be the issue?

Federation