Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hello,

We are actively looking to migrate from Google Identity Platform into Ory Network.
I can’t seem to find the equivalent of custom claims that I set on the user ones (<https://cloud.google.com/identity-platform/docs/how-to-configure-custom-claims|Google identity platform> docs) for Ory? I find the documentation for the webhook: <https://www.ory.sh/docs/hydra/guides/claims-at-refresh> which seems to can the webhook everytime the user refresh a token. Perhaps it is supported but I can’t seem to find it in the docs.

Yes webhooks are the way to do that. 
We may add jsonnet-based mappings down the road, but webhooks ultimately give you more flexibility 

Will this endpoint get called on login as well since that requests a token?

We’ve tried the <https://www.ory.sh/docs/hydra/guides/claims-at-refresh|documentation> but seem to get no callback after configuring

```ory patch oauth2-config &lt;OUR PROJECT ID&gt; \
  --add "/oauth2/token_hook=\"&lt;OUR URL&gt;\"" \
  --format yaml```