Hi, I think this is related with what we discussed in our last meeting regarding scopes. See https://datatracker.ietf.org/doc/draft-wdenniss-oauth-incremental-auth/. We have that in AuthZ Services, but this should be pure OAuth2. Regards. Pedro Igor