From 098e480e7427a92c1d61fcf2313f1a07bbe2b467 Mon Sep 17 00:00:00 2001 From: braginini Date: Mon, 12 Jan 2026 13:40:49 +0100 Subject: [PATCH] Require groups scope in dex config for okt and pocket --- idp/dex/provider.go | 1 + 1 file changed, 1 insertion(+) diff --git a/idp/dex/provider.go b/idp/dex/provider.go index 9e3d5f22c..6a4fe7873 100644 --- a/idp/dex/provider.go +++ b/idp/dex/provider.go @@ -807,6 +807,7 @@ func buildOIDCConnectorConfig(cfg *ConnectorConfig, redirectURI string) ([]byte, oidcConfig["claimMapping"] = map[string]string{"email": "preferred_username"} case "okta": oidcConfig["insecureSkipEmailVerified"] = true + oidcConfig["scopes"] = []string{"openid", "profile", "email", "groups"} case "pocketid": oidcConfig["scopes"] = []string{"openid", "profile", "email", "groups"} }