Related to #5200 and https://github.com/spring-projects/spring-security/pull/6352#discussion_r251856850 One way to simplify would be by creating an `IntrospectionClaimAccessor` similar to `JwtClaimAccessor`.