Hi. I am using a client scope script mapper with: token.setOtherClaims("cn", cn); I expected to see this attribute in my Javascript Authorization Policy when doing: identity.getAttributes().toMap() However, my "cn" claim/attribute is not there. Am I misunderstanding the docs or doing something wrong? The docs say: The Identity is built based on the OAuth2 Access Token that was sent along with the authorization request, and this construct has access to all claims extracted from the original token. For example, if you are using a *Protocol Mapper* to include a custom claim in an OAuth2 Access Token you can also access this claim from a policy and use it to build your conditions. Regards, Geoffrey Cleaves