diff --git a/pkg/internal/converter/convert.go b/pkg/internal/converter/convert.go index fa9cd3e1..96104c3b 100644 --- a/pkg/internal/converter/convert.go +++ b/pkg/internal/converter/convert.go @@ -406,6 +406,12 @@ func Convert(o Options, pathOptions *clientcmd.PathOptions) error { exec.Args = append(exec.Args, argIsLegacy) } + // PoP token flags are optional but must be provided together + exec.Args, err = validatePoPClaims(exec.Args, isPoPTokenEnabled, argPoPTokenClaims, argPoPTokenClaimsVal) + if err != nil { + return err + } + case token.WorkloadIdentityLogin: if o.isSet(flagClientID) {