Hello Okta team,
We have a SPA that needs to retrieve user’s recovery question immediately after login. Currently we use Okta.SDK to perform a call to API and load the whole profile, but we’d like to simplify this process and include user’s recovery question in id_token or access_token to avoid that extra API call. However, I could not find attribute for it in Okta Expression Language reference (by the way, it would be a good idea to include available user/appuser attributes in https://developer.okta.com/docs/reference/okta-expression-language, because it’s hard to find them).
Is it possible to add recovery question as a token claim?