# \#custom-claims **URL:** https://community.auth0.com/tag/custom-claims/301.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Permissions from event.authorization.permissions become empty in custom JWT generated inside Post Login Action](https://community.auth0.com/t/permissions-from-event-authorization-permissions-become-empty-in-custom-jwt-generated-inside-post-login-action/200229)
**Author:** [@usha78633](https://community.auth0.com/u/usha78633)\ **Replies:** 1\ **Last updated:** [May 29, 2026, 8:42pm UTC](https://community.auth0.com/t/permissions-from-event-authorization-permissions-become-empty-in-custom-jwt-generated-inside-post-login-action/200229 "2026-05-29T20:42:24Z")
I am using a Post Login Action in Auth0 to generate a custom PAT JWT using jsonwebtoken.sign(). RBAC is enabled and “Add Permissions in Access Token” is enabled for my API. The Auth0-issued access token correctly conta… --- ## [Extend Transaction Metadata to the Custom Token Exchange flow](https://community.auth0.com/t/extend-transaction-metadata-to-the-custom-token-exchange-flow/198640)
**Author:** [@shennessey](https://community.auth0.com/u/shennessey)\ **Replies:** 1\ **Last updated:** [April 29, 2026, 7:09pm UTC](https://community.auth0.com/t/extend-transaction-metadata-to-the-custom-token-exchange-flow/198640 "2026-04-29T19:09:19Z")
Feature: Allow transaction metadata set in a Custom Token Exchange Action to be read by the following Post Login Action Description: The Transaction Metadata feature is an obviously superior method of passing data betwe… --- ## [Unable to create custom claim with special character in the claim name](https://community.auth0.com/t/unable-to-create-custom-claim-with-special-character-in-the-claim-name/109670)
**Author:** [@venkatasandeep.kolis](https://community.auth0.com/u/venkatasandeep.kolis)\ **Replies:** 2\ **Last updated:** [June 21, 2023, 6:39pm UTC](https://community.auth0.com/t/unable-to-create-custom-claim-with-special-character-in-the-claim-name/109670 "2023-06-21T18:39:16Z")
I am trying to create an access token with a custom claim with a special character in the claim name(ex: user\_email) but I see the generated token is not taking up the claim. but I was successful with a special characte… --- ## [Post-Login Action not adding email to access token](https://community.auth0.com/t/post-login-action-not-adding-email-to-access-token/97804)
**Author:** [@sweet](https://community.auth0.com/u/sweet)\ **Replies:** 1\ **Last updated:** [January 11, 2023, 12:14am UTC](https://community.auth0.com/t/post-login-action-not-adding-email-to-access-token/97804 "2023-01-11T00:14:32Z")
I want to add the user’s email as a custom claim on my API access token. Following these instructions, I created a Post-Login Action to do so: exports.onExecutePostLogin = async (event, api) =\> { // This adds the au… --- ## [Upcoming change to non-namespaced custom claims](https://community.auth0.com/t/upcoming-change-to-non-namespaced-custom-claims/92053)
**Author:** [@sean.mclemon1](https://community.auth0.com/u/sean.mclemon1)\ **Replies:** 3\ **Last updated:** [October 28, 2022, 4:40pm UTC](https://community.auth0.com/t/upcoming-change-to-non-namespaced-custom-claims/92053 "2022-10-28T16:40:07Z")
We received a notification that a number of our Auth0 tenants will affected by the upcoming change to non-namespaced claims (this one). However I reviewed the migration advice and could not see any actions because: we … --- ## [Custom claims namespaced continue works fine in 2023?](https://community.auth0.com/t/custom-claims-namespaced-continue-works-fine-in-2023/87944)
**Author:** [@rafa](https://community.auth0.com/u/rafa)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 11:29am UTC](https://community.auth0.com/t/custom-claims-namespaced-continue-works-fine-in-2023/87944 "2022-08-01T11:29:25Z")
I have received an email saying that I can now use custom Claims no-namespaced but if I want to continue using my current custom Claims namespaced, I understand that I do not have to do anything right? and that will con… --- ## [What does "Name of the claim (note that this may need to be a fully-qualified URL)." mean for custom claims](https://community.auth0.com/t/what-does-name-of-the-claim-note-that-this-may-need-to-be-a-fully-qualified-url-mean-for-custom-claims/85638)
**Author:** [@jgleason](https://community.auth0.com/u/jgleason)\ **Replies:** 4\ **Last updated:** [June 22, 2022, 8:42pm UTC](https://community.auth0.com/t/what-does-name-of-the-claim-note-that-this-may-need-to-be-a-fully-qualified-url-mean-for-custom-claims/85638 "2022-06-22T20:42:52Z")
I am setting a custom claim like this… api.accessToken.setCustomClaim(…, event.user.app\_metadata.corporation\_id); Is there a reason in this case to need a url for the claim name as describe? --- ## [Update Access Token custom claims with Refresh Token](https://community.auth0.com/t/update-access-token-custom-claims-with-refresh-token/82336)
**Author:** [@hector](https://community.auth0.com/u/hector)\ **Replies:** 5\ **Last updated:** [May 2, 2022, 4:31pm UTC](https://community.auth0.com/t/update-access-token-custom-claims-with-refresh-token/82336 "2022-05-02T16:31:19Z")
Hello! We are using the React Native SDK to handle login, logout and fetching new access tokens using the refresh token. During login we pass a query parameter to the authentication page, which is read by the Login Acti… --- ## [Custom claims missing from tokens](https://community.auth0.com/t/custom-claims-missing-from-tokens/81425)
**Author:** [@argo](https://community.auth0.com/u/argo)\ **Replies:** 4\ **Last updated:** [April 21, 2022, 3:16pm UTC](https://community.auth0.com/t/custom-claims-missing-from-tokens/81425 "2022-04-21T15:16:01Z")
Hi. I am using a rule to add custom claims to tokens obtained using the resource owner password flow. On two tenants, with identical app configurations, API configurations, rules and connections, one app obtains all cu… --- ## [How to decode and access custom claims from idToken using react-native-auth0 SDK](https://community.auth0.com/t/how-to-decode-and-access-custom-claims-from-idtoken-using-react-native-auth0-sdk/76175)
**Author:** [@jw-85](https://community.auth0.com/u/jw-85)\ **Replies:** 6\ **Last updated:** [January 21, 2022, 12:17am UTC](https://community.auth0.com/t/how-to-decode-and-access-custom-claims-from-idtoken-using-react-native-auth0-sdk/76175 "2022-01-21T00:17:00Z")
Hi community, I need a bit of assistance… I am trying to decode the idToken returned from auth0.webAuth.authorize() using the rect-native-auth0 SDK as I have included some custom claims via a Login Action Flow (externa… --- ## [How to access the \`tenantid\` property on a \`User\` in an Auth0 action](https://community.auth0.com/t/how-to-access-the-tenantid-property-on-a-user-in-an-auth0-action/73388)
**Author:** [@oystein-beaufort](https://community.auth0.com/u/oystein-beaufort)\ **Replies:** 8\ **Last updated:** [January 5, 2022, 8:47am UTC](https://community.auth0.com/t/how-to-access-the-tenantid-property-on-a-user-in-an-auth0-action/73388 "2022-01-05T08:47:46Z")
Hi! Some of our users authenticates with Azure AD, and we currently have a rule that sets a custom azure\_ad\_tenant\_id claim on the id and access tokens so that the we know which Azure AD tenant the user belongs to by do… --- ## [Adding Hasura claims with actions](https://community.auth0.com/t/adding-hasura-claims-with-actions/71790)
**Author:** [@ulisses](https://community.auth0.com/u/ulisses)\ **Replies:** 1\ **Last updated:** [October 21, 2021, 6:21pm UTC](https://community.auth0.com/t/adding-hasura-claims-with-actions/71790 "2021-10-21T18:21:00Z")
Hasura docs show how to integrate Auth0 JWT with it’s graphql api. But they are using Rules to add the claims. It looks like Auth0 is recommending Actions now. I tried to make add the claims using actions but it is n… --- ## [Namespaced claim replaces period (.) with colon (:)](https://community.auth0.com/t/namespaced-claim-replaces-period-with-colon/59773)
**Author:** [@blake.thomson](https://community.auth0.com/u/blake.thomson)\ **Replies:** 4\ **Last updated:** [May 21, 2021, 7:55am UTC](https://community.auth0.com/t/namespaced-claim-replaces-period-with-colon/59773 "2021-05-21T07:55:57Z")
I’m using a rule to include a custom namespaced claim (e.g. https://example.com/claim) in the idToken, per the guidelines here: Create Custom Claims. This works great; when I test out my login flow I see "https://example… --- ## [Using 'sub' as user id](https://community.auth0.com/t/using-sub-as-user-id/58306)
**Author:** [@ama](https://community.auth0.com/u/ama)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 8:50pm UTC](https://community.auth0.com/t/using-sub-as-user-id/58306 "2021-02-22T20:50:15Z")
Hello, I am new to Auth0, I have an app that requires a unique user Id for a user to carry out certain tasks. I understand that I can create custom claims for the user id. My question is, can I use the ‘sub’ claim as a… --- ## [Trying to get app\_metadata from /userinfo endpoint](https://community.auth0.com/t/trying-to-get-app-metadata-from-userinfo-endpoint/48385)
**Author:** [@nathleia.llc](https://community.auth0.com/u/nathleia.llc)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 3:23pm UTC](https://community.auth0.com/t/trying-to-get-app-metadata-from-userinfo-endpoint/48385 "2020-08-20T15:23:22Z")
I am trying to set things up to be able to get app\_metadata from the /userinfo endpoint. I have looked at topics in here as well as on StackOverflow and have been stymied and confused. Using Custom Claims looks like it d… --- ## [Lets talk about resource authorization](https://community.auth0.com/t/lets-talk-about-resource-authorization/39045)
**Author:** [@Torbjorn](https://community.auth0.com/u/Torbjorn)\ **Replies:** 1\ **Last updated:** [March 9, 2020, 11:51am UTC](https://community.auth0.com/t/lets-talk-about-resource-authorization/39045 "2020-03-09T11:51:26Z")
Introduction It is fairly easy to get a role and permission based authorization system going for an API and it is sufficient for most use cases. However, I am in need of more fine grained authorization in some of my use… --- ## [Custom claims without namespace](https://community.auth0.com/t/custom-claims-without-namespace/10999)
**Author:** [@nilsga](https://community.auth0.com/u/nilsga)\ **Replies:** 1\ **Last updated:** [December 18, 2018, 5:44pm UTC](https://community.auth0.com/t/custom-claims-without-namespace/10999 "2018-12-18T17:44:18Z")
I’m trying to set up role based access with Auth0 and federated web identities on AWS (without Cognito). I have configured an OIDC provider, as described in the aws integration docs, and I have successfully attached cust… --- ## [Why aren't the tenant domains available for use for custom claim namespaces?](https://community.auth0.com/t/why-arent-the-tenant-domains-available-for-use-for-custom-claim-namespaces/9480)
**Author:** [@akos](https://community.auth0.com/u/akos)\ **Replies:** 1\ **Last updated:** [December 17, 2018, 3:31pm UTC](https://community.auth0.com/t/why-arent-the-tenant-domains-available-for-use-for-custom-claim-namespaces/9480 "2018-12-17T15:31:18Z")
Hello! I believe I understand the security implications behind why auth0.com cannot be used as a custom claim namespace, but I’d like to know the logic behind the decision of disallowing mytenant.auth0.com as well, as t… --- ## [Only include specific claims in UserInfo (OIDC Compliant Flow)](https://community.auth0.com/t/only-include-specific-claims-in-userinfo-oidc-compliant-flow/9260)
**Author:** [@Martin\_EF\_Power](https://community.auth0.com/u/Martin_EF_Power)\ **Replies:** 1\ **Last updated:** [December 14, 2018, 6:05pm UTC](https://community.auth0.com/t/only-include-specific-claims-in-userinfo-oidc-compliant-flow/9260 "2018-12-14T18:05:51Z")
When adopting the OIDC compliant flows in Auth0, app\_metadata and user\_metadata are not included in the userinfo endpoint any longer. To include custom claims in the userinfo endpoint, we now need to add namespaced claim… --- ## [Claims missing from ID token after signup](https://community.auth0.com/t/claims-missing-from-id-token-after-signup/7878)
**Author:** [@rmaurer](https://community.auth0.com/u/rmaurer)\ **Replies:** 4\ **Last updated:** [January 20, 2018, 1:01am UTC](https://community.auth0.com/t/claims-missing-from-id-token-after-signup/7878 "2018-01-20T01:01:54Z")
I have Auth0 implemented in my Angular JS 1.5 app and it is working for my Google users and my userid/password users. When the user logs in, I have a rule that adds their custom claims to their id token, and then in my … --- ## [Custom Claims are not added after initial sign up](https://community.auth0.com/t/custom-claims-are-not-added-after-initial-sign-up/9058)
**Author:** [@mholtzman](https://community.auth0.com/u/mholtzman)\ **Replies:** 2\ **Last updated:** [December 27, 2017, 12:04am UTC](https://community.auth0.com/t/custom-claims-are-not-added-after-initial-sign-up/9058 "2017-12-27T00:04:28Z")
I just noticed an issue with a Rule I have that adds the Roles a user is a member of as a custom claim to the id token. The Rule is pretty basic, it is below. This Rule works fine on regular User logins. I noticed thoug… --- ## [Using Auth0 purely for access\_token generation](https://community.auth0.com/t/using-auth0-purely-for-access-token-generation/8603)
**Author:** [@chris.gilbert](https://community.auth0.com/u/chris.gilbert)\ **Replies:** 3\ **Last updated:** [December 23, 2017, 3:49pm UTC](https://community.auth0.com/t/using-auth0-purely-for-access-token-generation/8603 "2017-12-23T15:49:29Z")
Is it possible to use Auth0 purely as a method of securely generating and renewing access tokens including a few custom claims or is it inherently designed to have the client authorization credentials stored within the A… --- ## [Rule : Add persistent attributes to the user gives an ERROR when executed](https://community.auth0.com/t/rule-add-persistent-attributes-to-the-user-gives-an-error-when-executed/8238)
**Author:** [@nicksjun2017](https://community.auth0.com/u/nicksjun2017)\ **Replies:** 0\ **Last updated:** [September 19, 2017, 5:21am UTC](https://community.auth0.com/t/rule-add-persistent-attributes-to-the-user-gives-an-error-when-executed/8238 "2017-09-19T05:21:10Z")
Getting the error : “ERROR: The user does not exist.” when I am trying to execute the default rule “Add persistent attributes to the user”. No changes to the code provided: function (user, context, callback) { user.us… --- ## [Custom claims in userinfo but not in ID token](https://community.auth0.com/t/custom-claims-in-userinfo-but-not-in-id-token/8198)
**Author:** [@per](https://community.auth0.com/u/per)\ **Replies:** 0\ **Last updated:** [September 15, 2017, 6:44pm UTC](https://community.auth0.com/t/custom-claims-in-userinfo-but-not-in-id-token/8198 "2017-09-15T18:44:47Z")
I’d like to include custom claims in the userinfo response. I have succeeded by creating a rule that adds a custom namespaced claim to the ID token. However, the claim also appears in the ID token (obviously). Is there a… --- ## [/oauth/access\_token custom claims](https://community.auth0.com/t/oauth-access-token-custom-claims/7450)
**Author:** [@valerio.mazzeo](https://community.auth0.com/u/valerio.mazzeo)\ **Replies:** 6\ **Last updated:** [July 11, 2017, 10:22pm UTC](https://community.auth0.com/t/oauth-access-token-custom-claims/7450 "2017-07-11T22:22:55Z")
My current flow is the following: User open a native app, using the Facebook sdk retrieves a Facebook access\_token, then I exchange that for an auth0 access token. My understanding is that /oauth/access\_token has been… --- ## [Unable to add namespaced claims to ID Token while using /delegation with a refresh token flow](https://community.auth0.com/t/unable-to-add-namespaced-claims-to-id-token-while-using-delegation-with-a-refresh-token-flow/6253)
**Author:** [@jacob.wang](https://community.auth0.com/u/jacob.wang)\ **Replies:** 3\ **Last updated:** [April 19, 2017, 2:24pm UTC](https://community.auth0.com/t/unable-to-add-namespaced-claims-to-id-token-while-using-delegation-with-a-refresh-token-flow/6253 "2017-04-19T14:24:33Z")
It seems I’m not able to add additional custom claims to the ID Token for /delegation endpoint with a refresh token. I have a rule which adds custom claims to both the access token and ID token. From the webtask log I c…