Unable to get user information (userid, email, etc.) from lock 10

The audience parameter is only if you have configured an API, and require an access token in order to make calls to the API. If you do not have an API configured, try removing this parameter.

The sub claim in the id_token will be the unique ID of the user. More information regarding the ID token claims are available here: