# More than Default Scopes on Identity Provider

**URL:** <https://forum.keycloak.org/t/more-than-default-scopes-on-identity-provider/4760>\
**Category:** Securing applications\
**Tags:** oidc\
**Created:** [September 8, 2020, 8:08am UTC](https://forum.keycloak.org/t/more-than-default-scopes-on-identity-provider/4760 "2020-09-08T08:08:02Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![deefdragon](https://avatars.discourse-cdn.com/v4/letter/d/d6d6ee/32.png) [@deefdragon](https://forum.keycloak.org/u/deefdragon)\
**Post date:** [September 8, 2020, 8:08am UTC](https://forum.keycloak.org/t/more-than-default-scopes-on-identity-provider/4760/1 "2020-09-08T08:08:02Z")

</div>

I am making a tool that relies quite a bit on a third party. I have found how to login with that third party IDP, and how to [pull the keys](https://www.keycloak.org/docs/latest/server_admin/#retrieving-external-idp-tokens) from keycloak once a user is logged in via said IDP. The issue however is in that I dont want to require all the scopes as not all users will require all scopes.

Based on the fact that the field is called default scopes, I assume that there is a way to set more than just those scopes and make the user re-login (and Ideally force that particular IDP on re-login), but I cant find it anywhere. Does anyone know if its possible, and if it is where the documentation is on it?