Thanks for the reply. I know that the best practice is the store the user attributes in the user_metadata field (or app_metadata). My question though is what if I need those attributes in my application. I know I can make an API call to get the metadata for a single user, but that solution does not scale.
For example, what if I want to return a list of 25 “games” and with each game display some fields from the user profile. I am not going to make 25 API calls to Auth0 /userInfo API first. That will introduce too much latency in my API response for the “games”.