# claims-authorization

> Claude/Codex skill by [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars · Updated 2026-10-16

Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation, claim type mapping, token claim filtering, extension grant validators, and dynamic claims loading.

Tags: ai-agents, claude, claude-code

## Install

```sh
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/claims-authorization ~/.claude/skills/claims-authorization
```

## From README

Claims Transformation & Profile Service When to Use This Skill You are implementing or customizing IProfileService to control which claims are emitted into identity tokens, access tokens, or the userinfo endpoint. You need to map claims from an external identity provider (Google, Azure AD, SAML, etc.) into your IdentityServer user principal during login callback processing. You are configuring IdentityResource, ApiScope, or ApiResource UserClaims collections and need to understand how requested scopes drive ProfileDataRequestContext.RequestedClaimTypes. You are troubleshooting missing claims — claims are defined on resources but not appearing in tokens or on the userinfo endpoint. You need to load claims dynamically from a database or downstream service at token issuance time. You are implementing an IExtensionGrantValidator and need to emit custom claims into the resulting access token.

## Links

- HTML page: https://omgskills.com/library/duendesoftware/duende-skills/skills/claims-authorization/
- GitHub: https://github.com/DuendeSoftware/duende-skills
- Author: [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md)

## More from this repo

- [aspnetcore-authentication](https://omgskills.com/library/duendesoftware/duende-skills/skills/aspnetcore-authentication/index.md) — ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
   - [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars
- [aspnetcore-authorization](https://omgskills.com/library/duendesoftware/duende-skills/skills/aspnetcore-authorization/index.md) — ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
   - [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars
- [duende-bff](https://omgskills.com/library/duendesoftware/duende-skills/skills/duende-bff/index.md) — Duende BFF (Backend for Frontend) security framework for securing SPAs.
   - [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars