I have integrated the client’s Azure AD in KeyCloak.

Unfortunately in profile data we are not receiving email but when I have decoded the Bearertoken..it has all the information I need.

In Identitiy provider settings..If I select Verify JWT Token, its throwing Verification Signature failed error, if I un select and try to login..it is looking for mapper email which is not found in profile dump json data.

Client is complaining that response_type=code in the request url instead of responstype=code id_token which is the reason I am not receiving the email in the profile data.

Can anyone suggest how can I get full profle data by updating response_type=code id_token please. Unfortunately I am unable to find such setting in identity provider.