Merge pull request #381 from NHSDigital/APM-5267-pass-identity-proofi…

…ng-level APM-5267: Add identity_proofing_level
NHSDigital · Jun 18, 2024 · 638197a · 638197a
2 parents b406395 + 15a054f
commit 638197a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/proxies/live/apiproxy/policies/OAuthV2.GenerateAccessToken.xml b/proxies/live/apiproxy/policies/OAuthV2.GenerateAccessToken.xml
@@ -19,6 +19,7 @@
         <Attribute name="id_token-acr" ref="jwt.DecodeJWT.FromExternalIdToken.claim.acr" display="true"/>
         <Attribute name="id_token-amr" ref="jwt.DecodeJWT.FromExternalIdToken.claim.amr" display="true"/>
         <Attribute name="id_token-id-assurance-level" ref="jwt.DecodeJWT.FromExternalIdToken.claim.id_assurance_level" display="true"/>
+        <Attribute name="id_token-identity-proofing-level" ref="jwt.DecodeJWT.FromExternalIdToken.claim.identity_proofing_level" display="true"/>
         <Attribute name="auth_type" ref="splunk.auth.type" display="true"/>
         <Attribute name="auth_grant_type" ref="splunk.auth.grant_type" display="true"/>
         <Attribute name="auth_provider" ref="splunk.auth.provider" display="true"/>

diff --git a/proxies/live/apiproxy/policies/OAuthV2.TokenExchangeGenerateAccessTokenFilteredScopes.xml b/proxies/live/apiproxy/policies/OAuthV2.TokenExchangeGenerateAccessTokenFilteredScopes.xml
@@ -24,6 +24,7 @@
         <Attribute name="id_token-acr" ref="jwt.VerifyJWT.SubjectToken.claim.acr" display="true" />
         <Attribute name="id_token-amr" ref="jwt.VerifyJWT.SubjectToken.claim.amr" display="true" />
         <Attribute name="id_token-id-assurance-level" ref="jwt.VerifyJWT.SubjectToken.claim.id_assurance_level" display="true" />
+        <Attribute name="id_token-identity-proofing-level" ref="jwt.VerifyJWT.SubjectToken.claim.identity_proofing_level" display="true"/>
         <Attribute name="grant_type" display="true">urn:ietf:params:oauth:grant-type:token-exchange</Attribute>
         <Attribute name="auth_type" ref="splunk.auth.type" display="true" />
         <Attribute name="auth_grant_type" ref="splunk.auth.grant_type" display="true" />