The default implementation of ScopeValidator is OpenAMScopeValidator. The source is not available in public, also it doesn't use public API (e.g Scripting Engine).
If customers want to customize the default implementation, they can't write an OpenAMScopeValidator equivalent, so they will be missing the current functionality if they try to do so. What I have seen is that customers somehow got hold of some version of OpenAMScopeValidator and customize that, which is not supported ...
The OpenAMScopeValidator defines the variables for the OIDC claims script/OAuth2 modification script, so this would be beneficial for these customizations too (linked RFE around giving more access to these scripts).
So the request is:
- make OpenAMScopeValidator use public API
- provide OpenAMScopeValidator source