Support for multi-level claim extraction from id_token and access_token
- Services: API Gateway
- Release Date: December 13, 2023
You can now extract custom claims from the id_token
and access_token
tokens used during the OpenID Connect flow, a method referred to as 'multi-level claim extraction'.
Using multi-level claim extraction, you can set up an API gateway to:
- dynamically select the appropriate authentication server for request authentication
- dynamically select back ends for routing requests
- pass the values extracted from custom claims as headers and query parameters, to a back end
For more information, see Adding Context Variables to Policies and HTTP Back End Definitions.