ID Token

The id_token response value is a JWT. The payload of the JWT includes the following. For more details please see ID Token, jti & nbf. Also the contents of the ID Token MUST be validated in the same manner as for the Authorization Code Flow. Please see ID Token Validation for more details.

Parameter	Description	Example
iss	Issuer Identifier for the Issuer of the response. This is the redirect_uri you provided during login or registration.	https://localhost:8443
sub	This is your unique ID for this user. We call it the Tenant FanID. The Tenant FanID is unique for every user for every integrating tenant.	3597CFF2-48DA-4243-ABF4-94DDD5F94AFC
aud	Audience(s) that this ID Token is intended for. This is your client id.	your-test-client-id-here
exp	Expiration time on or after which the ID Token MUST NOT be accepted for processing.	1683230817
iat	Time at which the JWT was issued.	1683230817
auth_time	Time when the End-User authentication occurred.	1683227217
nonce	String value used to associate a Client session with an ID Token, and to mitigate replay attacks.	MWm7UiN6SKrPGdVk
amr	Authentication Methods References. JSON array of strings that are identifiers for authentication methods used in the authentication.	["pwd"]
jti	JWT ID claim which is a unique identifier for the JWT	40966842-7FC6-407B-88B4-5AF8F24CA2B4
nbf	The not before claim identifies the time before which the JWT MUST NOT be accepted for processing.	1683227217