title: asp.net Identity Role claims in Thinktecture.IdentityServer.v3
body: <p>I have a sample Auth server set up using Thinktecure.IdentityServer.v3 which also has the Thinktecture.IdentityManager plugged in. I am also using asp.net Identity and Entity Framework, so I have the associated plugins from Thinktecture wired up too. Relevant NuGet packages below</p>
  
  <pre><code>&lt;package id="Thinktecture.IdentityManager" version="1.0.0-beta3" targetFramework="net451" /&gt;
  &lt;package id="Thinktecture.IdentityManager.AspNetIdentity" version="1.0.0-beta3" targetFramework="net451" /&gt;
  &lt;package id="Thinktecture.IdentityModel.Core" version="1.3.0" targetFramework="net451" /&gt;
  &lt;package id="Thinktecture.IdentityServer.v3" version="1.0.0-rc" targetFramework="net451" /&gt;
  &lt;package id="Thinktecture.IdentityServer.v3.AspNetIdentity" version="1.0.0-rc" targetFramework="net451" /&gt;
  &lt;package id="Thinktecture.IdentityServer.v3.EntityFramework" version="1.0.0-rc" targetFramework="net451" /&gt;
  </code></pre>
  
  <p>I have registered IdentityManager and IdentityServer as per the sample projects included in the IdentityServer samples repo.</p>
  
  <p>I have created a user successfully using the IdentityManager and have created a role claim named 'Admin'. I have added the user to this role / claim.</p>
  
  <p>Using the 'JavaScript Implicit Client' from the Clients sample, I am logging in via my Auth server with the correct credentials. I am challenged as I should be, then returned successfully to the client application with the identity token.</p>
  
  <p>The JavaScript Implicit Client allows you to view the contents of your Identity token. There is no list of 'role' claims present in the token... which I understand as these claims are asp.net Identity specific.</p>
  
  <p>My question really is... how do I include these role claims in an identity token?</p>
  
  <p>Do I need to create a custom scope named 'roles', apply a ClaimsRule to return claims of type 'role' and then try and implement that ClaimsRule in a custom ClaimsProvider? If so, I haven't seen how we can implement a ClaimsRule correctly in any documentation.</p>
  
  <p>The fact that asp.net Identity seems to be intended to be supported out-of-the-box after RTM... maybe there is an easier way?</p>
  
  <p>If any additional information or samples of config are required, I can provide them :)</p>