Hello @hugo.delacruz,
The user’s email address will be included in their idToken if you request the email scope. You can also add their email address to an access token using a rule, or you can query the /userinfo endpoint.
Hope that helps,
Mark