Skip to main content

Scopes

Scopes control what information your app can access.


Available scopes​

ScopeDescription
openidRequired. Enables the ID token and sub claim in the userinfo response.
profileReserved for future use. Will expose additional profile fields.

Requesting scopes​

Include scopes as a space-separated list in the authorization request:

?scope=openid

When a user authorizes your app for the first time, they see a consent screen listing the requested scopes. On subsequent logins with the same scope set, consent is remembered and the screen is skipped.

If your app requests additional scopes in a future login, the consent screen will appear again for the new scopes.