OptionalClaimID of the IdentityClaimType (if Name is not provided)
OptionalClaimName of the IdentityClaimType
OptionalEntityOptional polymorphic target entity ID
OptionalExpiresExact expiry instant, for claims shorter than a day (whole days cannot express "ten
minutes"). Takes precedence over ExpiresInDays. Must be a valid instant in the future.
OptionalExpiresLifespan in days before expiration (defaults to ClaimType.DefaultExpirationDays)
OptionalMagicOptional linked MagicLinkInvite ID for token verification
OptionalMetadataOptional tracking metadata
OptionalNormalizedEmail address of the intended recipient/claimant.
Optional ONLY for claim types whose Configuration sets RequireToken: true. Such a claim
is redeemed by its token alone, so it needs no recipient — for example, a link that hands
an anonymous visitor's work to whoever signs in holding it. The claim is stored with an
empty NormalizedEmail, which no account can match, so email-match redemption and
auto-claim on login can never reach it. Every other claim type still requires an email.
OptionalPayloadOptional payload data for driver consumption
OptionalRecordOptional target record primary key ID
Parameters for creating a new Identity Claim