Sorry for the back and forth, but if there’s also a requirement of direct control by end-users then you could consider going back to user_metadata and then in a rule do something like user.name = user.user_metadata.name; which, again based on quick tests and not formal documentation, would get you the behavior of having the value in the issued OIDC standard claim of name.