@thomas.schuerger The jwt claims only support top level attributes, as you see using authinfo.
You have 2 options to get this working:
- You can use mappers in JWT provider (IDP) to convert it to top level attribute.
- You can add this to the roles section, since roles supports nested attributes, (You might find this case useful)