title: Getting user information from customer ADFS
body: <p>I have the following setup:</p>
  
  <p>-We have a ADFS 4.0 (win 2016) running.</p>
  
  <p>-Customer has ADFS 3.0 (win 2012R2). (configured as claim provider trust with our ADFS).</p>
  
  <p>-The customer ADFS have configured the following claim rules for the relying party trust (on their ADFS):</p>
  
  <p><a href="https://i.stack.imgur.com/yWsqz.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/yWsqz.png" alt="enter image description here"></a></p>
  
  <p>I have configured the same claim rules for the Application group WEP API application as "Passthrough or filter an incoming claim" adding all scopes.</p>
  
  <p>I am using the openid-connect "Authorization code flow" using something like</p>
  
  <pre><code>https://{sts_token_service}/adfs/oauth2/authorize/?response_type=code&amp;client_id={client_id}&amp;redirect_uri={uri}/&amp;scope=openid+profile+allatclaims+email+user_impersonation&amp;nonce=nonce
  </code></pre>
  
  <p>AND</p>
  
  <pre><code>https://{sts_token_service}/adfs/oauth2/token/
  ?grant_type=authorization_code
  &amp;code={code}
  &amp;resource={resource}
  &amp;client_id={client_id}&amp;redirect_uri={uri}
  &amp;scope=openid+profile+allatclaims+email+user_impersonation
  </code></pre>
  
  <p>I am getting a valid access token just fine, that can be used access the protected api, but I really need the claims as well and I only get upn, but not the others.</p>
  
  <p>Any help will be appriciated.</p>