ID Token

A JSON Web Token (JWT) containing claims about the identity and preferences of the authenticated user.
It is valid for 1 hour after being issued.

  • sub — the End-User's ID. Always present.
  • aud — the client ID the ID token was issued to. Always present.
  • acr — the Authentication Context Class the End-User's authentication satisfied.
  • auth_time — when the End-User authenticated.
  • address, email, locale, name — present only if the authorization's scope includes the corresponding read permission.