An extension of oidc_client that adds claims to a fetched user resource from an LDAP / AD server. For example, to map an email address or subject claim to an account identifier used by your organization.