External IDP - getting stuff out of the idToken - ZITADEL