- 8 minutes to read

Claims Overview

Gain complete control of your authorization Claims in Nodinite v7. This page guides you through managing, adding, editing, deleting, and restoring Claims—the building blocks of OIDC/OAuth 2.0 authorization.

  • ✅ Centralized management of all Claims
  • ✅ Inline editing for quick Claim creation
  • ✅ Track which Policies use each Claim
  • ✅ Powerful filtering and search capabilities

Note

Claims are only available when Nodinite is configured for OIDC/OAuth 2.0 authentication mode (Install Nodinite v7 - OpenID). For Windows authentication mode, use Users and Windows AD Groups instead.

Get started now: Add or manage Claim user guide.

The Claims Overview in the Access Management menu is where a Nodinite Administrator manages Claims for OIDC/OAuth 2.0 authorization.

This page focuses on managing the list of Claims. For detailed information about how Claims work, authorization flows, and identity provider mapping, see What is a Claim?

Understanding Claims in Access Management

A Claim is a key/value pair that must match a value in the user's token from your identity provider. Claims are grouped into Policies, and Policies are assigned to Roles, which carry the permission sets.

flowchart LR IDP["fa:fa-id-card Identity provider<br/>token claims"] -->|"must match"| C["fa:fa-key Claim<br/>Key = Value"] C -->|"grouped into"| P["fa:fa-shield-halved Policy"] P -->|"assigned to"| R["fa:fa-users-class Role"] R -->|"Permission Sets"| A["fa:fa-unlock Log Views, Monitor Views,<br/>Repository Model, C4 Diagram Sets"] style IDP fill:#9E59BB,color:#fff style C fill:#2678BD,color:#fff style P fill:#E47528,color:#fff style R fill:#E47528,color:#fff style A fill:#93d16d,color:#000

Purple: your external identity provider; blue: the Claims you manage on this page; orange: the Policies and Roles that use them; green: the access granted.

The Claims List

In the Claims Overview, you have a sortable list of defined Claims. You can narrow an extensive list by typing characters into the filter text box.

Claims Overview list with filter box, Include deleted checkbox, and the Group=Admin Claim
The Claims Overview with one Claim used in the 'Default' Policy.

Manage Claims

The available functionalities for Managing Claims are:

  • Add new Claim - Create Claims with inline editing
  • Edit existing Claim - Modify Key, Value, or Description
  • Delete Claim - Remove Claims (can be restored)
  • Restore deleted Claim - Recover previously deleted Claims
  • Filter the list of Claims - Search by Key, Value, or Description
  • Sort - Order by any column
  • View Usage - See which Policies use each Claim

Add new Claim

Click the "Add Claim" button to create a new Claim using inline editing.

Add Claim button on the Claims Overview
The "Add Claim" button adds a new row in inline edit mode.

A new row appears where you can enter:

  • Key (Required) - The claim key identifier
  • Value (Required) - The claim value
  • Description (Optional) - A clear description of the Claim's purpose

Click "Save" to create the Claim, or "Cancel" to abort.

Tip

The Key must match the claim name in your identity provider's token exactly (for example roles or groups for Microsoft Entra ID). See OpenID Field Mapping Quick Reference and What is a Claim?

Edit Claim

To Edit an existing Claim, click the Edit button (pencil icon) to the left of the "Action" button.

Claims list row with the pencil Edit button highlighted
The pencil button puts the Claim row in edit mode.

The row enters edit mode where you can modify:

  • Key - Change the claim key
  • Value - Change the claim value
  • Description - Update the description

Click "Save" to apply changes, or "Cancel" to discard.

Warning

Changing the Key or Value changes every Policy that uses the Claim. Ensure the new combination doesn't duplicate an existing Claim, and that your identity provider sends it.

Delete Claim

To Delete an existing Claim, open the menu from the "Action" button and click the "Delete" menu item.

Action button menu with the Delete menu item highlighted
The 'Delete' menu item opens a confirmation modal.

A confirmation modal appears showing:

  • The Claim being deleted
  • Which Policies currently use this Claim
  • Warning about the impact

Important

Deleted Claims remain visible in Policies where they were used (marked with a warning badge). This maintains the audit trail.

Restore deleted Claim

To Restore a deleted Claim, first check the "Include deleted" checkbox.

When checked, deleted Claims are also presented in the list with a "Deleted" status badge.

Claims list with Include deleted checked showing a Deleted and an Available Claim
With "Include deleted" checked, a Status column shows 'Deleted' and 'Available' badges.

Then open the menu from the "Action" button and click the "Restore" menu item.

Action button menu with the Restore menu item highlighted
The 'Restore' menu item replaces 'Delete' on a deleted Claim.

Filter Claims

Use the search filter at the top of the page to find Claims:

  • Type any text to search across Key, Value, and Description fields
  • Results update in real-time as you type
  • Clear the filter to show all Claims

Claims filter text box with the placeholder Filter the result
The filter narrows the list as you type.

Sort Claims

Click any column header to sort the list:

  • Key - Alphabetical order
  • Value - Alphabetical order
  • Created - Date/time order
  • Changed - Date/time order

Click again to reverse the sort order (ascending/descending).

View Claim Usage

The "Used In" column shows which Policies reference each Claim:

Used In column with Country Administrator and Default Policy badges
Each badge in the "Used In" column links to a Policy that contains the Claim.

  • Policy badges - Clickable links to each Policy
  • Count indicator - "(+N more)" when more than 10 Policies use the Claim
  • Hover tooltip - Shows full list of all Policies
  • Empty - Claim not used in any Policy

Click any Policy badge to navigate to that Policy's detail page.

Tip

Always check the "Used In" column before deleting a Claim to understand the impact on your Policies.

Understanding the Columns

Column Description Sortable
Status Shows an "Available" or "Deleted" badge (when "Include deleted" is checked) Yes
Key The claim key identifier (e.g., roles, groups, department) Yes
Value The claim value (e.g., Nodinite.Admin, finance) Yes
Description Optional description of the Claim's purpose No
Used In Badges showing which Policies use this Claim No
Created Timestamp when the Claim was created Yes
Changed Timestamp when the Claim was last modified Yes
Actions Pencil (Edit) button and Action menu with Delete or Restore No

Quick Reference

Validation Rules

  • Key/Value combination must be unique - Cannot create duplicates
  • Required fields - Key and Value are mandatory
  • Case-sensitive - department=Finance ≠ department=finance
  • Deleted Claims - Can be restored, remain visible in Policies with warning badge

Tip

For detailed validation rules, naming conventions, and best practices, see What is a Claim?

Frequently Asked Questions

More answers are in the Access Management Troubleshooting guide and in Claims and Policies - Common Scenarios.

How do I know which Policies use a Claim?

Check the "Used In" column for each Claim. It shows badges for all Policies that reference that Claim. Click any badge to navigate to the Policy details.

Can I edit a Claim that's used in Policies?

Yes, but changing the Key or Value changes what every Policy using the Claim requires. Changing the Description is always safe. See What is a Claim? for detailed guidance.

What happens when I delete a Claim?

  • Marked as deleted and hidden from main list
  • Remains visible in Policies with warning badge
  • Can be restored at any time
  • Audit trail is preserved in Log Audits

Why can't I create a new Claim?

  1. Key/Value combination already exists - Check "Include deleted"
  2. Missing required field - Both Key and Value required
  3. Insufficient permissions - Need the Administrators Role
  4. Browser session expired - Refresh and log in

Which Claims does my identity provider send?

Inspect the token, or see Entra ID Token Claims Validation and OpenID Field Mapping Quick Reference. Claims entered in the Auth step of the Portal at installation are the starting point.

Tip

For conceptual questions about Claims, authorization models, and integration patterns, see What is a Claim?

Troubleshooting

Cannot add Claim - "Already exists" error

  1. Check if Key/Value exists in active list
  2. Enable "Include deleted" - may have been deleted
  3. Restore instead of creating new if found

Claim doesn't appear in Policy editor

  1. Refresh browser page
  2. Verify Claim was saved successfully
  3. Check if accidentally deleted

Cannot delete Claim

  1. Refresh page and try again
  2. Check browser session hasn't expired
  3. Another administrator may be editing the same Claim

Next Steps

Claims

Policies

Roles

Access Management and Authentication

Windows Mode Alternative