As I was trying to use theoidc_user_info token handler with a customclaim setting, I noticed (debugged) that the specified claim is only set on theUserBadge, but not on the actualOidcUser object. The latter gets the original$claims array as the constructor parameters through the\Symfony\Component\Security\Http\AccessToken\Oidc\OidcTrait::createUser, that's why the selected claim does not get set currently.

This patch does solve this case.

I.e. using this examplefrom the doc does not set theemail claim asOidcUser::userIdentifier, that property will never be set.

# config/packages/security.yamlsecurity:    firewalls:        main:            access_token:                token_handler:                    oidc_user_info:                        claim: email                        base_uri: https://www.example.com/realms/demo/protocol/openid-connect/userinfo

Please let me know if it's not the intended way to set up the user class.

If this is should be the correct flow (as I assume), I'm willing to cover it with tests in this PR.