Hi @ddolgov ,
I believe the user object is based on what is returned in the ID token, but app_metadata isn’t a standard OIDC claim.
To get around this, you can add the app_metadata as a custom claim and it should be available in the user object the next time you fetch a token. Please see here for some more detail on adding custom claims to tokens: