Support for multi-level claim extraction from id_token and access_token

You can now extract custom claims from the id_token and access_token tokens used during the OpenID Connect flow, a method referred to as 'multi-level claim extraction'.

Using multi-level claim extraction, you can set up an API gateway to:

  • dynamically select the appropriate authentication server for request authentication
  • dynamically select back ends for routing requests
  • pass the values extracted from custom claims as headers and query parameters, to a back end 

For more information, see Adding Context Variables to Policies and HTTP Back End Definitions.