OAuth custom identity claims for service principal tokens will soon be available

Applications will be able to attach a custom identity claim to the OAuth tokens they request for a service principal, by adding the custom claim parameter to a token request that uses the client credentials or urn:ietf:params:oauth:grant type:token exchange grant type. You can then read the value in SQL with the current oauth custom identity claim() function. Use custom identity claims to serve many end users through one service principal while each user sees only their own data.