Setting custom metadata in token

[rueben.tiow]

Hi @nemanja.milojevic,

Welcome to the Auth0 Community!

@nemanja.milojevic

But, as far as I know, scopes can’t be dynamic, they need to be predefined in Auth0 dashboard (please correct me if I’m wrong). And scopes can’t be modified using actions, at least for now.

Yes, that is correct. Auth0 Actions cannot modify scopes. Auth0 Rules is capable of doing this, but we recently just announced the deprecation for Rules and Hooks coming soon, so this is not a future-proof solution. See the context.accessToken object for more details.

@nemanja.milojevic

Another option is to use actions to set a custom claim, but the problem is that we would need to get that identifier from somewhere. We could query their API, but they would need to agree to build such an endpoint and we want to avoid that.

I recommend going with this approach with using Auth0 Actions to set a custom claim if this option is possible for you. I have shared a helpful resource below worth checking out: How do I make an Axios API call and store it as a custom claim using Actions? FAQ.

@nemanja.milojevic

Another option that I’m considering right now is using actions to redirect a user to an external page and set that identifier there.

Yes, this is possible as well. When you use Redirect Actions, you will need to pass the dynamic identifier back to the authentication transaction to set the identifier in the Access/ID token.

May I ask if it is possible for you to set this dynamic identifier to the user’s metadata preemptively and then setting it as a custom claim when they log in?

I look forward to your reply.

Thanks,
Rueben