you need settings custom mapper, in client scope settings https://www.keycloak.org/docs/latest/server_admin/index.html#_client_scopes