The ID token will get an email
claim automatically if the following is true:
- The user object has an
email
attribute - You request the
email
scope in the/authorize
request
If either of these are false, you can still add it by using a rule or an Action. You should be able to do that without using a namespace - eg: context.idToken.email
.