I have created an Oauth Server and defined custom scope and claims in the configuration. On the access token (JWT), I see scope is being defined as "scp": [ "default_google_scope" ] I am trying to set an integration between OIDC and GCP workload identity configuration using tutorial : https://cloud.google.com/iam/docs/configuring-workload-identity-federation#oidc_1 https://medium.com/google-cloud/google-cloud-workload-identity-federation-with-okta-90c05b985b17 I am not following what should be the format for attribute mapping and conditions?

Formats for Attribute Mapping & Attribute Conditioning in the Workload identity

I have created an Oauth Server and defined custom scope and claims in the configuration. On the access token (JWT), I see scope is being defined as

"scp": [
    "default_google_scope"
]

I am trying to set an integration between OIDC and GCP workload identity configuration using tutorial :

I am not following what should be the format for attribute mapping and conditions?