Hi, Alex.
Thanks for your response! I have looked into your suggestions and here are my findings:
1) I understand that "external_uri_registration_uri" needs to be set to the uri of the registration page. The documentation suggests this may be done by including a User Registration custom script and adding in the prepareForStep method. Based on this I made changes to the basic Sample Authentication script and enabled it. However it does not seem to do anything. I am not able to see anything in the logs at oxauth_script.log. I tried adding print statements at the start of the method, but again no output in the logs. This suggests the method is not invoked at all when opening the login page as part of an auth request. Following is the change I added to the script.
```
def prepareForStep(self, configurationAttributes, requestParameters, step):
found = configurationAttributes.containsKey("registration_uri")
if found:
registrationUri = configurationAttributes.get("registration_uri").getValue2()
Contexts.getEventContext().set("external_registration_uri", registrationUri)
print "External Registration URI Set to " + Contexts.getEventContext().get("external_registration_uri")
if (step == 1):
print "Basic. Prepare for Step 1"
return True
else:
return False
```
3) I checked again and either of openid or profile scopes work on their own. Case in point: I have assigned profile, openid, and clientinfo scopes to my Client under "OpenID Connect->Clients". Making a request with clientinfo alone as the scope fails as expected returning the HTTP 403 response:
```
"{"error":"insufficient_scope","error_description":"The request requires higher privileges than provided by the access token."}"
```
However including either "openid" or "profile" in my code and token requests successfully returns the attributes for all the scopes requested.
Kind regards,
Nabeel.