If you want the back-channel to work for data that's part of the front-channel, you have to set the option that encodes them into the access token so they're accessible on the back-channel. I don't recall the name of the option, but it's documented. -- Scott