Modifying ID token

You will need to re-auth the user one way or another - It depends on the technology you are working with, but silent auth is an option for SPA SDKs for example: