ISK claim is removed from id token (refreshed) if the user attributes are updated

[isuruhettiarachchi]

Describe the issue:
When the session extended endpoint is enable and the token binding is set to SSO session, isk attribute will be returned in the id token. If the users attributes are updated and the token is refreshed (using refresh token grant), isk claim will be removed from the id token. Since the session is not revoked, the isk claim should return when the token is refreshed.

How to reproduce:

1. Enable session extended endpoint
2. Create a service provider and enable SSO session binding
3. Get an access token with openid scope
4. Update the user attribute from the mgt console
5. Refresh the access token
6. ISK claim will be removed in the new id token

Expected behavior:
isk attribute should not be removed when the user attributes are changed.

Environment information:

• Product Version: IS 5.11.0

[1] - https://is.docs.wso2.com/en/5.11.0/develop/idp-session-extender-endpoint/#identity-provider-session-extending-api