The claim field from the OIDC token to use as the unique user identifier (e.g., 'email', 'sub', or a custom claim).