Your company develops an internal single-page web application registered in Microsoft Entra ID. The development team reports that after a user signs in, the ID token does not contain the user's email address, which the app needs to display in its UI. The users are cloud-only accounts that have the mail attribute populated. You must ensure the email address is included in the token without changing application code that reads the standard 'email' claim. What should you configure on the app registration?