When we look at the json-message containing the access_token we noticed that "email" is part of the scope eventhough (as far as we know) we didn't specify any scope. 

{
  "sub": "SNS2551838",
  "app_version": "25.34",
  "iss": "urn:www-t1.snsbank.nl",
  "psync_id": "256f7e4d84eff68ebeb3704f164084c3",
  "operator_access": "PcHypotheekC11n:Customer",
  "aud": "urn:22709575095215276110",
  "app_name": "PcHypotheekC11n",
  "nbf": 1753971318,
  "scope": [
    "app.alias.PcHypotheekC11n",
    "email"
  ],
  "exp": 1753973318,
  "iat": 1753972418,
  "jti": "72d484ce74fbf23db248122d99da797a"
}

We would like to know where this can be configured or is this something that is added by the Pega Platform?

I hope anybody can help us.
Kind regards,
René van Seuren