The OIDC spec details acr and amr claims that are currently not supported by authlib, and thus cannot be integrated in the id_token .

https://github.com/lepture/authlib/blob/dc501640f9c882ed8e48d6268ca6df2c556ab9bd/authlib/oidc/core/grants/util.py#L63-L75

As acr and amr are data related to the current user session, it might be handled the same way than the auth_time claim.