ID Token

The id_token response value is a JWT. The payload of the JWT includes the following. For more details please see ID Tokenarrow-up-right, jtiarrow-up-right & nbfarrow-up-right. Also the contents of the ID Token MUST be validated in the same manner as for the Authorization Code Flow. Please see ID Token Validationarrow-up-right for more details.

Parameter
Description
Example

iss

Issuer Identifier for the Issuer of the response. This is the redirect_uri you provided during login or registration.

https://localhost:8443

sub

This is your unique ID for this user. We call it the Tenant FanID. The Tenant FanID is unique for every user for every integrating tenant.

3597CFF2-48DA-4243-ABF4-94DDD5F94AFC

aud

Audience(s) that this ID Token is intended for. This is your client id.

your-test-client-id-here

exp

Expiration time on or after which the ID Token MUST NOT be accepted for processing.

1683230817

iat

Time at which the JWT was issued.

1683230817

auth_time

Time when the End-User authentication occurred.

1683227217

nonce

String value used to associate a Client session with an ID Token, and to mitigate replay attacks.

MWm7UiN6SKrPGdVk

amr

Authentication Methods References. JSON array of strings that are identifiers for authentication methods used in the authentication.

["pwd"]

jti

JWT ID claim which is a unique identifier for the JWT

40966842-7FC6-407B-88B4-5AF8F24CA2B4

nbf

The not before claim identifies the time before which the JWT MUST NOT be accepted for processing.

1683227217

Last updated