Additional provider-specific claims
OptionalemailUser's email address
OptionalfirstUser's first name
OptionalfullUser's full display name
OptionallastUser's last name
OptionalpreferredPreferred username or handle
OptionalrolesUser's roles or groups
OptionaluserUnique user identifier from the auth provider
User information extracted from authentication tokens or user profiles