How to pass back custom user attributes in the SAML attributes payload?

Getting advice
1

Is at all possible to return custom attributes in the SAML attributes payload on authentication success.

I am able to map over the givenName and surname since those are our of the box but let’s say I added a custom user attribute of security question and security answer.

While I can retrieve these from a user using OpenConnect and OAuth flows I cannot get them to map to SAML attributes.

I have created a client scope on the realm for securityQuestion1:

scope_security_question
scope_security_question2134×1516 162 KB

With a client mapper of:

scope_security_question_mapper
scope_security_question_mapper2132×1356 154 KB

And on my client in this realm I have added the scope to the client details:

client_details_client_scopes
client_details_client_scopes3000×486 14.5 KB

However, even after doing this all I receive in the attributes is the first name and last name.

Is there a way to expose the custom field? Am I doing something incorrectly?

2

Did you manage to solve it? I am facing the same challenge.
I want to add custom attributes to SAML authentication flow given the authentication was successful