You can now bring attributes from your SAML and custom OIDC connections into Hanko as custom claims, with definitions and mappings fully configurable in the Hanko Cloud Console.
Define the claims your application needs, such as department, groups, or employee ID, and map the corresponding attributes from each identity provider. Different providers can use different attribute names while your application receives a consistent set of claims.
Custom claims support typed values, including strings, numbers, booleans, and lists. Values are updated when users sign in through a mapped connection and can be included in session tokens using JWT templates. A new user.update.custom_claims webhook event lets your application react when values change.
Group users into organizations and assign roles within each organization. A user can, for example, be an admin in one organization and a member in another.
You can manage organizations, memberships, and role assignments through the Admin API, and check the current user’s organization roles through a dedicated session-based endpoint.
This feature currently requires a Hanko Cloud Pro subscription and is managed through the Admin API. Support for managing organizations and roles in the Hanko Cloud Console is coming soon.
$2b$ format.