Oracle IDCS cannot handle special characters in claim names with custom claims. It also has a problem with the default namespace.
Hasura could alleviate the problem by allowing configuration of claim names looked for in Tokens.
The "use the webhook" as a workaround is as stated in many other issues has its problems with the round trip time etc.