diff --git a/api/envoy/extensions/filters/http/jwt_authn/v3/config.proto b/api/envoy/extensions/filters/http/jwt_authn/v3/config.proto
index 9d6af6ede2a6..c30b5959db09 100644
--- a/api/envoy/extensions/filters/http/jwt_authn/v3/config.proto
+++ b/api/envoy/extensions/filters/http/jwt_authn/v3/config.proto
@@ -232,9 +232,12 @@ message JwtProvider {
 
   // Alters the payload representation in the request dynamic metadata to facilitate its use in matching.
   message NormalizePayload {
-    // Converts the space delimited claims into lists of string, e.g. ``"email
-    // profile"`` is translated to ``["email", "profile"]``. For example,
-    // ``scope`` claim requires this normalization per `RFC8693
+    // Each claim in this list will be interpreted as a space-delimited string
+    // and converted to a list of strings based on the delimited values.
+    // Example: a token with a claim ``scopes: "email profile"`` is translated
+    // to dynamic metadata  ``scopes: ["email", "profile"]`` if this field is
+    // set value ``["scopes"]``. This special handling of ``scopes`` is
+    // recommended by `RFC8693
     // <https://datatracker.ietf.org/doc/html/rfc8693#name-scope-scopes-claim>`_.
     repeated string space_delimited_claims = 1;
   }