Scopes

Scope Name Sample Data Use
openid id_token User authentication
oauth2_tokens 
"oauth": [ 
    { 
      "access_token": "ya29.a0AfH6S” 
      "provider": "google", 
      "subject": "104241676902092822009", 
      "created": 1602574579, 
      "name": "Google", 
      "expiry": 3524, 
      "scopes": "https://www.googleapis.com/auth/userinfo.profile,
        https://www.googleapis.com/auth/userinfo.email,openid", 
      "type": "oauth2" 
    } 
  ]
 Array of OAuth access tokens for the 3rd party identities associated with the profile of the user.
affiliations 
"affiliations": [ 
    { 
      "created": 1597073676, 
      "description": "Demo College", 
      "type": "EMAIL", 
      "value": "[email protected]", 
      "remaining": 2274768 
    }, 

    { 
      "created": 1600794812, 
      "description": "Newcastle University", 
      "type": "IP", 
      "value": "128.240.10.10", 
      "remaining": 5995904 
    } 
  ]
An array of the user’s verified institutional memberships.
login_method 
"login_method": "google"

The method used to log in .

The possible values are:

  • google
  • apple
  • orcid
  • password
  • code
settings 
"settings": { 
    "logActivity": true, 
    "affiliationsEnabled": true, 
    "ipRecordingEnabled": true, 
    "marketable": true, 
    "marketableEmail":"[email protected]", 
    "searchable": true, 
    "demographicShared": true 
  },
The user's CONNECT profile settings.
token_introspection n/a The ability to introspect tokens at /api/introspection
identity_roles 
"roles": [ 
    { 
      "code": "Super Admin", 
      "name": "Super Admin", 
      "space": { 
        "code": "app", 
        "name": "Application Name" 
      } 
   ]
The user roles.