Hi @Joep good day, aplogies for getting back late, can you explain more on "The device/client would pass the id as param to the AS during the auth request. Then the AS could verify it and add the claim to the toke". What is "AS" here. You can set custom claims via action(Post authentication) to make it dynamic.