[keycloak-user] Missing claims from custom scope

I have some custom claims which are added to the access token at login. This is working fine, verified the token has the claims etc... Today I have added user impersonation to the client app - it is not using the direct "naked grant" to request a token on behalf of a user. I get a valid token back, but it is missing the claims from the custom client scope. I have tried with, and without adding a scope to the request, and also adding the client scope as default for the realm and the client - but the claims are still not added to the token. Suggestions? Thanks, James ---- *James Mitchell* Developer e: jamesm(a)suitebox.com w: www.suitebox.com *SuiteBox |* Level 4, 8 Mahuhu Crescent, Auckland 1010, NZ