Hi there @nrzayeva ,
My understanding is as follows:
If tenant2 serves as an Identity Provider in this configuration, users’ profile data from IdP will be synced to Tenant1 records. (Just like when users log into your application via a social Identity Provider like Google, selected Google user profile fields will be synced with the Auth0 tenant.)
Thus, to update the app_metadata in tenant2, my idea would be to call the tenant2’s Management API within the Action script hosted in the tenant1, similar as mentioned here: Update App Meta Data from Post User Registration - #6 by stephanie.chamblee
What do you think?