# Open ID Connect default scope

**URL:** <https://forum.keycloak.org/t/open-id-connect-default-scope/2644>\
**Category:** Configuring the server\
**Tags:** authentication\
**Created:** [May 11, 2020, 4:14pm UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644 "2020-05-11T16:14:19Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![JustFerry](https://avatars.discourse-cdn.com/v4/letter/j/dec6dc/32.png) [@JustFerry](https://forum.keycloak.org/u/JustFerry)\
**Post date:** [May 11, 2020, 4:14pm UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/1 "2020-05-11T16:14:19Z")

</div>

Hey folks,

I have a working Keycloak installation, and I added a OpenID Connect Application which is exactly what I’m having issues with.

I configured two scopes, but Keycloak provides the “openid” scope by default, causing the application to return an error. Can I remove this default scope? I couldn’t find anything about it, so I’m giving it a shot here.

Ferry

---

<div class="post-metadata">

**Author:** ![jangaraj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/jangaraj/32/5175_2.png) [@jangaraj](https://forum.keycloak.org/u/jangaraj)\
**Post date:** [May 11, 2020, 5:09pm UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/2 "2020-05-11T17:09:51Z")

</div>

“openid” scope defines that you want to use Open ID Connect (OIDC) on top OAuth 2.0 protocol. Does your app really supports OIDC or only OAuth protocol?

---

<div class="post-metadata">

**Author:** ![JustFerry](https://avatars.discourse-cdn.com/v4/letter/j/dec6dc/32.png) [@JustFerry](https://forum.keycloak.org/u/JustFerry)\
**Post date:** [May 11, 2020, 5:22pm UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/3 "2020-05-11T17:22:38Z")

</div>

The app only supports the OAuth 2.0 protocol. I figured that that shouldn’t matter, as Open ID Connect should be a “layer” of the OAuth 2.0 framework?

Am I wrong at this point, and is there anything I could do to support OAuth 2?

---

<div class="post-metadata">

**Author:** ![jangaraj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/jangaraj/32/5175_2.png) [@jangaraj](https://forum.keycloak.org/u/jangaraj)\
**Post date:** [May 11, 2020, 5:52pm UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/4 "2020-05-11T17:52:24Z")

</div>

Yes, but how is client configured?

 ![image](https://global.discourse-cdn.com/free1/uploads/keycloak/original/1X/bf2dc2c86ceba94072aebbe1ab1f7ac824e7699f.png)  
So client is OIDC and not OAuth. I don’t think so you can use OIDC client as OAuth client.

---

<div class="post-metadata">

**Author:** ![JustFerry](https://avatars.discourse-cdn.com/v4/letter/j/dec6dc/32.png) [@JustFerry](https://forum.keycloak.org/u/JustFerry)\
**Post date:** [May 11, 2020, 11:22pm UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/5 "2020-05-11T23:22:20Z")

</div>

I found an extension on GitHub which was made specifically for this application. It didn’t seem to like OAuth with OIDC as you mentioned.

Thank you for your comments!

---

<div class="post-metadata">

**Author:** ![dvlpphb](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dvlpphb/32/5386_2.png) [@dvlpphb](https://forum.keycloak.org/u/dvlpphb)\
**Post date:** [April 15, 2022, 9:41am UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/6 "2022-04-15T09:41:40Z")

</div>

> [@JustFerry](#):
>
> pports the OAuth 2.0 protocol. I figured that that shouldn’t matter, as Open ID Connect should be a “layer” of the OAuth 2.0 framework?

Could you share with us the GitHub link?

---

<div class="post-metadata">

**Author:** ![riteshkhatri](https://avatars.discourse-cdn.com/v4/letter/r/e274bd/32.png) [@riteshkhatri](https://forum.keycloak.org/u/riteshkhatri)\
**Post date:** [October 19, 2022, 2:38pm UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/7 "2022-10-19T14:38:53Z")

</div>

Hey  
Can you post your solution here?

---

<div class="post-metadata">

**Author:** ![JustFerry](https://avatars.discourse-cdn.com/v4/letter/j/dec6dc/32.png) [@JustFerry](https://forum.keycloak.org/u/JustFerry)\
**Post date:** [October 19, 2022, 2:56pm UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/8 "2022-10-19T14:56:12Z")

</div>

Hey!

I ended up using this extension: [GitHub - wadahiro/keycloak-discord: Keycloak Identity Provider extension for Discord](https://github.com/wadahiro/keycloak-discord)

---

<div class="post-metadata">

**Author:** ![riteshkhatri](https://avatars.discourse-cdn.com/v4/letter/r/e274bd/32.png) [@riteshkhatri](https://forum.keycloak.org/u/riteshkhatri)\
**Post date:** [October 20, 2022, 5:49am UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/9 "2022-10-20T05:49:21Z")

</div>

Thank you for reply @JustFerry  
Will review this.

---

<div class="post-metadata">

**Author:** ![riteshkhatri](https://avatars.discourse-cdn.com/v4/letter/r/e274bd/32.png) [@riteshkhatri](https://forum.keycloak.org/u/riteshkhatri)\
**Post date:** [October 20, 2022, 9:18am UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/10 "2022-10-20T09:18:42Z")

</div>

Hello @JustFerry  
Did you used this repository as reference or your requirement is discord login?

---

<div class="post-metadata">

**Author:** ![JustFerry](https://avatars.discourse-cdn.com/v4/letter/j/dec6dc/32.png) [@JustFerry](https://forum.keycloak.org/u/JustFerry)\
**Post date:** [October 20, 2022, 12:46pm UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/11 "2022-10-20T12:46:02Z")

</div>

Hi there!

Sorry - I posted the link rather quickly. I was indeed looking for a solution to implement a Discord login. For me, the openid scope was an issue as Discord would not accept this scope. This repository was a workaround for that.

Sorry for the confusion!

---

<div class="post-metadata">

**Author:** ![riteshkhatri](https://avatars.discourse-cdn.com/v4/letter/r/e274bd/32.png) [@riteshkhatri](https://forum.keycloak.org/u/riteshkhatri)\
**Post date:** [October 20, 2022, 2:40pm UTC](https://forum.keycloak.org/t/open-id-connect-default-scope/2644/12 "2022-10-20T14:40:44Z")

</div>

Okay so the the problem of openid scope is not solved yet.  
Right?
