OptionalactOptionalemailOptionalemail_Optionalfamily_Optionalgiven_OptionalnameOptionalnicknameOptionalorg_The organization ID that the user belongs to. This field is populated when the user logs in through an organization.
OptionalpictureOptionalsession_IPSIE session ceiling — absolute Unix timestamp (seconds) after which the
upstream IdP session has expired. Present only when the enterprise connection
has id_token_session_expiry_supported: true. The SDK enforces this as a hard
ceiling on the local session; reads return no-session once it passes.
Optionalurn:auth0:my_The effective my_org:* permissions for the authenticated user within their
current organization. Derived from directly assigned and effective roles.
Populated automatically from the ID token — no additional scope required.
Applies to user tokens only (M2M flows do not produce an ID token).
The actor claim from the ID token, present in delegation/impersonation flows (RFC 8693). Set by an Auth0 Action via
api.authentication.setActor().