Using sub claim to lookup user

[tawaren]

Is their a way to get the user from the "sub" claim that can be found in the access & id tokens?

It seems that the "sub" claim is always generated on the fly and not stored and thus my preliminary conclusion is that I can not get a User from the "sub" value. However, I wanted to ask if this conclusion is correct or if I missed something?

[yuriyz]

AS supports both, persistent and algorithmic identifiers. If you set client.subjectType=pairwise and AS global configuration to pairwiseIdType=persistent then you can reference in identifer both client and user.

Please check these two code points

• jans/jans-auth-server/server/src/main/java/io/jans/as/server/service/PairwiseIdentifierService.java

  Line 68 in 6c1caa1

  public PairwiseIdentifier findPairWiseIdentifier(String userInum, String sectorIdentifier, String clientId) throws Exception {

• jans/jans-auth-server/persistence-model/src/main/java/io/jans/as/persistence/model/PairwiseIdentifier.java

  Line 32 in 546b1c2

  private String userInum;

[tawaren]

This works, I know can resolve sub -> inum over a query using the EntryPersistenceManager.

[nynymike]

Also see the Docs on Subject Identifiers

Did you know you can search the docs?