Adding lastLogin timestamp to an Access Tokens claims via expression language

[SF_Brad]

Is there syntax in Okta’s EL to add a custom claim(lastLogin Timestamp) to an access token? Or is this only available via GET Request to Okta /users

How to get lastLogin, created, passwordChanged user attributes with React and okta-auth-js?

As you surmised, the getUserInfo method sends the access token you provide to the /userinfo endpoint to get information about their claims, so the only information you will be returned would be the custom claims you configured as well as any of the user claims that are associated with the ‘openid’ and ‘profile’ scopes requested, as documented in this list. The information you want is, as mentioned in that StackOverflow post, available by making a GET request to the /users endpoint which you can…

I have tried the following with no success

user.lastLogin
lastLogin
{{#lastLogin}}
{{lastLogin}}
{{/lastLogin}}

[vk-giri]

Hi, Not all the user attributes can be accessed through the custom claims, lastLogin being one of them. This is only possible via the Users Endpoint as you mentioned.

To check what user attributes you can get back, make a custom claim and assign it’s value as user. Then in the Token preview you can get an idea of what values are accessible in the Tokens