diff --git a/proxies/live/apiproxy/policies/OAuthV2.GenerateAccessToken.xml b/proxies/live/apiproxy/policies/OAuthV2.GenerateAccessToken.xml
index 9ff7fc4d..0fdbb50e 100644
--- a/proxies/live/apiproxy/policies/OAuthV2.GenerateAccessToken.xml
+++ b/proxies/live/apiproxy/policies/OAuthV2.GenerateAccessToken.xml
@@ -19,6 +19,7 @@
         <Attribute name="id_token-acr" ref="jwt.DecodeJWT.FromExternalIdToken.claim.acr" display="true"/>
         <Attribute name="id_token-amr" ref="jwt.DecodeJWT.FromExternalIdToken.claim.amr" display="true"/>
         <Attribute name="id_token-id-assurance-level" ref="jwt.DecodeJWT.FromExternalIdToken.claim.id_assurance_level" display="true"/>
+        <Attribute name="id_token-identity-proofing-level" ref="jwt.DecodeJWT.FromExternalIdToken.decoded.claim.identity_proofing_level" display="true"/>
         <Attribute name="auth_type" ref="splunk.auth.type" display="true"/>
         <Attribute name="auth_grant_type" ref="splunk.auth.grant_type" display="true"/>
         <Attribute name="auth_provider" ref="splunk.auth.provider" display="true"/>
diff --git a/proxies/live/apiproxy/policies/OAuthV2.TokenExchangeGenerateAccessTokenFilteredScopes.xml b/proxies/live/apiproxy/policies/OAuthV2.TokenExchangeGenerateAccessTokenFilteredScopes.xml
index 6d497719..add20e0a 100644
--- a/proxies/live/apiproxy/policies/OAuthV2.TokenExchangeGenerateAccessTokenFilteredScopes.xml
+++ b/proxies/live/apiproxy/policies/OAuthV2.TokenExchangeGenerateAccessTokenFilteredScopes.xml
@@ -24,6 +24,7 @@
         <Attribute name="id_token-acr" ref="jwt.VerifyJWT.SubjectToken.claim.acr" display="true" />
         <Attribute name="id_token-amr" ref="jwt.VerifyJWT.SubjectToken.claim.amr" display="true" />
         <Attribute name="id_token-id-assurance-level" ref="jwt.VerifyJWT.SubjectToken.claim.id_assurance_level" display="true" />
+        <Attribute name="id_token-identity-proofing-level" ref="jwt.VerifyJWT.SubjectToken.claim.identity_proofing_level" display="true"/>
         <Attribute name="grant_type" display="true">urn:ietf:params:oauth:grant-type:token-exchange</Attribute>
         <Attribute name="auth_type" ref="splunk.auth.type" display="true" />
         <Attribute name="auth_grant_type" ref="splunk.auth.grant_type" display="true" />