In OIDC how to add auth_level to id_token

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

Using SiteMinder OIDC Provider. Issue with adding attributes to the tokens or userinfo responses, particularly the AUTHLEVEL. 



We cannot add any Generated response attributes : 

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/single-sign-on/12-8/configuring/policy-server-configuration/responses-and-response-groups/generated-user-attributes.html

Such as :   %SM_AUTHENTICATIONLEVEL

It gives an error.  It seems only user store attributes can be used. 

Environment

Release : 12.8.03

Component : SITEMINDER -WEB AGENT FOR APACHE

Resolution

This is currently scheduled for a fix in a later release.

Please show this knowledge document to Broadcom support and ask for the devfix where some generated attributes are made available, including SM_AUTHENTICATIONLEVEL.