[Required on Create] The type of the owner of the resource.

[Required on Create] The ID of the owner of the resource.

[Required on Create] The type of the custom claim.

[Required on Create] The name of the custom claim. Name must be unique (case-insensitive) within an application.

[Required on Create] The path expression that will be used to retrieve the custom claim value. Possible values are:

• role.name: Retrieves the names of all roles assigned to the authenticated subject.
• user.id: Retrieves the ID of the authenticated user.
• user.email: Retrieves the email of the authenticated user.
• user.restrictedMetadata.*: Retrieves the specified restricted metadata field from the authenticated user.
• user.publicMetadata.*: Retrieves the specified public metadata field from the authenticated user.
• tenant.id: Retrieves the ID of the tenant that the authenticated subject belongs to.
• tenant.domainName: [Deprecated: Use tenant.name instead] Retrieves the name of the tenant that the authenticated subject belongs to.
• tenant.name: Retrieves the name of the tenant that the authenticated subject belongs to.
• tenant.displayName: Retrieves the display name of the tenant that the authenticated subject belongs to.
• tenant.restrictedMetadata.*: Retrieves the specified restricted metadata field from the tenant that the authenticated subject belongs to.
• tenant.publicMetadata.*: Retrieves the specified public metadata field from the tenant that the authenticated subject belongs to.