---
title: Runbook — AUTH_CLAIM_MAPPING_FAILED (클레임 매핑 실패)
category: AUTH
error_codes: [AUTH_CLAIM_MAPPING_FAILED]
severity: P2
owner: oncall
last_updated: 2026-06-15
status: stub
---

# Runbook: AUTH_CLAIM_MAPPING_FAILED (`runbook://auth/claim-mapping-failed`)

## Symptoms

- HTTP 401 with `error.code=AUTH_CLAIM_MAPPING_FAILED`
- Token validated but required claims (sub, roles, tenant) missing or unexpected type

## Diagnosis

- Inspect token payload claims via logs
- Check claim extractor configuration

## Action

- Verify IdP token template includes required claims
- Update claim mapping configuration if IdP schema changed

## Escalation

- Escalate to auth-platform team if IdP changed claim schema

---

> **Stub**: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)