Only require the NameIdentifier claim.