
Most modern cloud authentication providers (i.e. Microsoft Entra ID, Auth0, Okta, etc.) provide a claims-based user management capability. A user can be assigned roles and permissions and these are surfaced in .NET’s user identity classes as ‘claims’.
Although, most of the time, claims can be configured and managed in the identity provider’s management console there may be times when you want to inject additional claims, and this article discusses how that can be done.