# /userinfo endpoint

**URL:** <https://community.auth0.com/t/userinfo-endpoint/97404>\
**Category:** Get Help\
**Tags:** deprecations\
**Created:** [January 3, 2023, 1:03pm UTC](https://community.auth0.com/t/userinfo-endpoint/97404 "2023-01-03T13:03:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jaydeeps03](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jaydeeps03/32/36419_2.png) [@Jaydeeps03](https://community.auth0.com/u/Jaydeeps03)\
**Post date:** [January 3, 2023, 1:03pm UTC](https://community.auth0.com/t/userinfo-endpoint/97404/1 "2023-01-03T13:03:59Z")

</div>

Hi,

We are migrating from Identity server to Auth0 and in Identity server, we were using ‘reference token’ which is small fixed length string which hold identifier for user custom claims. To get custom claims, we need to make call to introspect endpoint to get custom claims details.  
Now, in Auth0 we came across opaque token which is somewhat similar as reference token but not exactly.  
Currently, this opaque token can be used with only ‘/userinfo’ endpoint but also this endpoint does not return any custom claims which added into ‘AccessToken’ through ‘Auth0 Rule’ as below:  
context.accessToken.TestClaim1=‘TestClaim1’;

Recently, we came across the updates mentioned on ‘Deprecation & Migration’ ([Deprecations and Migrations](https://auth0.com/docs/troubleshoot/product-lifecycle/deprecations-and-migrations)) i.e.  
" If your tenant is running extensibility code ([Rules]/ [Hooks]/ [Actions]) that tries to set non-namespaced custom claims that are being ignored until this deprecation, then those claims will begin to appear on the tokens and the `/userinfo` response. We recommend you review your configuration and Auth0 logs.".  
So, my question here is that, can we expect the custom claim in ‘/userinfo’ endpoint which added into access token through rule based on above mentioned updates or this applies only for Id Token and not for access token?

Thanks,  
Jaydeep S

---

<div class="post-metadata">

**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\
**Post date:** [January 4, 2023, 11:33pm UTC](https://community.auth0.com/t/userinfo-endpoint/97404/3 "2023-01-04T23:33:00Z")

</div>

Hi there @Jaydeeps03!

> [@Jaydeeps03](#):
>
> So, my question here is that, can we expect the custom claim in ‘/userinfo’ endpoint which added into access token through rule based on above mentioned updates or this applies only for Id Token and not for access token?

The data returned by the [userinfo endpoint](https://auth0.com/docs/api/authentication#get-user-info) will be specific to the ID token (including custom claims) and **not the Access token**. Custom claims added to an AT via extensibility will only be available in the token itself. In order for an AT to be non-opaque, an `audience` will need to be included - Some more on that here:

[https://community.auth0.com/t/what-is-the-audience/71414](https://community.auth0.com/t/what-is-the-audience/71414)

Hope this helps!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [January 19, 2023, 2:04pm UTC](https://community.auth0.com/t/userinfo-endpoint/97404/5 "2023-01-19T14:04:54Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.