[ { "claim": "iss", "name": "Issuer", "description": "Identifies the principal that issued the JWT.", "reference": "RFC7519 Section 4.1.1" }, { "claim": "sub", "name": "Subject", "description": "Identifies the principal that is the subject of the JWT.", "reference": "RFC7519 Section 4.1.2" }, { "claim": "aud", "name": "Audience", "description": "Identifies the recipients that the JWT is intended for.", "reference": "RFC7519 Section 4.1.3" }, { "claim": "exp", "name": "Expiration Time", "description": "Identifies the expiration time on or after which the JWT must not be accepted for processing.", "reference": "RFC7519 Section 4.1.4" }, { "claim": "nbf", "name": "Not Before", "description": "Identifies the time before which the JWT must not be accepted for processing.", "reference": "RFC7519 Section 4.1.5" }, { "claim": "iat", "name": "Issued At", "description": "Identifies the time at which the JWT was issued.", "reference": "RFC7519 Section 4.1.6" }, { "claim": "jti", "name": "JWT ID", "description": "Provides a unique identifier for the JWT.", "reference": "RFC7519 Section 4.1.7" }, { "claim": "name", "name": "Full name", "description": "End-user's full name in displayable form including all name parts.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "given_name", "name": "Given name(s) or first name(s)", "description": "Given name(s) or first name(s) of the end-user.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "family_name", "name": "Surname(s) or last name(s)", "description": "Surname(s) or last name(s) of the end-user.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "middle_name", "name": "Middle name(s)", "description": "Middle name(s) of the end-user.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "nickname", "name": "Casual name", "description": "Casual name of the end-user that may or may not be the same as the given_name.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "preferred_username", "name": "Preferred username", "description": "Shorthand name by which the end-user wishes to be referred to at the relying party.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "profile", "name": "Profile page URL", "description": "URL of the end-user's profile page.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "picture", "name": "Profile picture URL", "description": "URL of the end-user's profile picture.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "website", "name": "Web page or blog URL", "description": "URL of the end-user's web page or blog.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "email", "name": "Preferred e-mail address", "description": "End-user's preferred e-mail address.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "email_verified", "name": "E-mail address verified", "description": "True if the end-user's e-mail address has been verified; otherwise false.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "gender", "name": "Gender", "description": "End-user's gender.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "birthdate", "name": "Birthday", "description": "End-user's birthday, represented as an ISO 8601-1 [ISO8601-1] YYYY-MM-DD format.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "zoneinfo", "name": "Time zone", "description": "String from the IANA Time Zone database representing the end-user's time zone.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "locale", "name": "Locale", "description": "End-user's locale, represented as a BCP47 [RFC5646] language tag.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "phone_number", "name": "Preferred telephone number", "description": "End-user's preferred telephone number.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "phone_number_verified", "name": "Phone number verified", "description": "True if the end-user's phone number has been verified; otherwise false.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "address", "name": "Preferred postal address", "description": "End-user's preferred postal address as a JSON object.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "updated_at", "name": "Time the information was last updated", "description": "Time the end-user's information was last updated.", "reference": "OpenID Connect Core 1.0 Section 5.1" }, { "claim": "azp", "name": "Authorized party", "description": "Authorized party — the party to which the ID Token was issued.", "reference": "OpenID Connect Core 1.0 Section 2" }, { "claim": "nonce", "name": "Nonce", "description": "Value used to associate a client session with an ID Token to mitigate replay attacks.", "reference": "OpenID Connect Core 1.0 Section 2, RFC9449" }, { "claim": "auth_time", "name": "Authentication time", "description": "Time when the end-user authentication occurred.", "reference": "OpenID Connect Core 1.0 Section 2" }, { "claim": "at_hash", "name": "Access Token hash value", "description": "Access Token hash value used to link the ID Token to an Access Token.", "reference": "OpenID Connect Core 1.0 Section 2" }, { "claim": "c_hash", "name": "Code hash value", "description": "Code hash value used to link the ID Token to an Authorization Code.", "reference": "OpenID Connect Core 1.0 Section 3.3.2.11" }, { "claim": "acr", "name": "Authentication Context Class Reference", "description": "Authentication Context Class Reference; identifies the Authentication Context Class that the authentication performed satisfied.", "reference": "OpenID Connect Core 1.0 Section 2" }, { "claim": "amr", "name": "Authentication Methods References", "description": "Authentication Methods References; JSON array of strings that are identifiers for authentication methods used in the authentication.", "reference": "OpenID Connect Core 1.0 Section 2" }, { "claim": "sub_jwk", "name": "Public key used to check the signature of an ID Token", "description": "JSON Web Key used to check the signature of an ID Token in Self-Issued OpenID Providers.", "reference": "OpenID Connect Core 1.0 Section 7.4" }, { "claim": "cnf", "name": "Confirmation", "description": "Members of the cnf claim identify proof-of-possession key.", "reference": "RFC7800 Section 3.1" }, { "claim": "sip_from_tag", "name": "SIP From tag header field parameter value", "description": "The SIP From tag header field parameter value of the SIP INVITE request.", "reference": "RFC8055, RFC3261" }, { "claim": "sip_date", "name": "SIP Date header field value", "description": "The SIP Date header field value of the SIP INVITE request.", "reference": "RFC8055, RFC3261" }, { "claim": "sip_callid", "name": "SIP Call-Id header field value", "description": "The SIP Call-Id header field value of the SIP INVITE request.", "reference": "RFC8055, RFC3261" }, { "claim": "sip_cseq_num", "name": "SIP CSeq numeric header field parameter value", "description": "The SIP CSeq numeric header field parameter value of the SIP INVITE request.", "reference": "RFC8055, RFC3261" }, { "claim": "sip_via_branch", "name": "SIP Via branch header field parameter value", "description": "The SIP Via branch header field parameter value of the SIP INVITE request.", "reference": "RFC8055, RFC3261" }, { "claim": "orig", "name": "Originating Identity String", "description": "The originating identity string from the PASSporT.", "reference": "RFC8225 Section 5.2.1" }, { "claim": "dest", "name": "Destination Identity String", "description": "The destination identity string from the PASSporT.", "reference": "RFC8225 Section 5.2.1" }, { "claim": "mky", "name": "Media Key Fingerprint String", "description": "The media key fingerprint string from the PASSporT.", "reference": "RFC8225 Section 5.2.2" }, { "claim": "events", "name": "Security Events", "description": "A JSON object whose members are Security Event Tokens.", "reference": "RFC8417 Section 2.2" }, { "claim": "toe", "name": "Time of Event", "description": "The time at which the security event occurred.", "reference": "RFC8417 Section 2.2" }, { "claim": "txn", "name": "Transaction Identifier", "description": "A unique transaction identifier.", "reference": "RFC8417 Section 2.2" }, { "claim": "rph", "name": "Resource Priority Header Authorization", "description": "Represents an assertion that the presenter of this JWT is authorized to use Resource-Priority header field values.", "reference": "RFC8443 Section 3" }, { "claim": "sid", "name": "Session ID", "description": "Session ID string used by the client to identify its authentication session.", "reference": "OpenID Connect Front-Channel Logout 1.0 Section 3" }, { "claim": "vot", "name": "Vector of Trust value", "description": "The Vector of Trust value, made up of one or more component values.", "reference": "RFC8485" }, { "claim": "vtm", "name": "Vector of Trust trustmark URL", "description": "A URI pointing to a trustmark for the Vector of Trust system in use.", "reference": "RFC8485" }, { "claim": "attest", "name": "Attestation level", "description": "Attestation level as defined in SHAKEN framework.", "reference": "RFC8588" }, { "claim": "origid", "name": "Originating Identifier", "description": "Originating Identifier as defined in SHAKEN framework.", "reference": "RFC8588" }, { "claim": "act", "name": "Actor", "description": "Identifies the acting party to whom authority has been delegated.", "reference": "RFC8693 Section 4.1" }, { "claim": "scope", "name": "Scope Values", "description": "OAuth 2.0 scope values as a space-delimited list.", "reference": "RFC8693 Section 4.2" }, { "claim": "client_id", "name": "Client Identifier", "description": "The OAuth 2.0 client_id of the entity to which the token was issued.", "reference": "RFC8693 Section 4.3" }, { "claim": "may_act", "name": "Authorized Actor", "description": "Authorized Actor — the party that is authorized to become the actor.", "reference": "RFC8693 Section 4.4" }, { "claim": "jcard", "name": "jCard data", "description": "Contact information represented as a jCard object.", "reference": "RFC8688, RFC7095" }, { "claim": "at_use_nbr", "name": "Number of API requests for access token", "description": "Number of API requests for which the access token can be used.", "reference": "ETSI GS NFV-SEC 022 V2.7.1" }, { "claim": "div", "name": "Diverted Target of a Call", "description": "The diverted target of a call in a PASSporT.", "reference": "RFC8946" }, { "claim": "opt", "name": "Original PASSporT (in Full Form)", "description": "The original PASSporT in full form when diversion occurs.", "reference": "RFC8946" }, { "claim": "vc", "name": "Verifiable Credential", "description": "Verifiable Credential as specified in the W3C Recommendation.", "reference": "W3C VC Data Model 1.0 Section 6.3.1" }, { "claim": "vp", "name": "Verifiable Presentation", "description": "Verifiable Presentation as specified in the W3C Recommendation.", "reference": "W3C VC Data Model 1.0 Section 6.3.1" }, { "claim": "sph", "name": "SIP Priority header field", "description": "The SIP Priority header field value.", "reference": "RFC9027" }, { "claim": "ace_profile", "name": "ACE profile", "description": "The ACE profile a token is supposed to be used with.", "reference": "RFC9200 Section 5.10" }, { "claim": "cnonce", "name": "Client nonce", "description": "A nonce previously provided to the authorization server by the RS via the client to verify token freshness.", "reference": "RFC9200 Section 5.10" }, { "claim": "exi", "name": "Expires in", "description": "Lifetime of the token in seconds from the time the RS first sees it.", "reference": "RFC9200 Section 5.10.3" }, { "claim": "roles", "name": "Roles", "description": "Roles claim as defined by SCIM.", "reference": "RFC7643 Section 4.1.2, RFC9068 Section 2.2.3.1" }, { "claim": "groups", "name": "Groups", "description": "Groups claim as defined by SCIM.", "reference": "RFC7643 Section 4.1.2, RFC9068 Section 2.2.3.1" }, { "claim": "entitlements", "name": "Entitlements", "description": "Entitlements claim as defined by SCIM.", "reference": "RFC7643 Section 4.1.2, RFC9068 Section 2.2.3.1" }, { "claim": "token_introspection", "name": "Token introspection response", "description": "Token introspection response as a JSON object.", "reference": "RFC9701 Section 5" }, { "claim": "eat_nonce", "name": "EAT Nonce", "description": "Nonce used in an Entity Attestation Token.", "reference": "RFC9711" }, { "claim": "ueid", "name": "Universal Entity ID", "description": "Universal Entity ID for a hardware entity.", "reference": "RFC9711" }, { "claim": "sueids", "name": "Semipermanent UEIDs", "description": "Semipermanent Universal Entity IDs.", "reference": "RFC9711" }, { "claim": "oemid", "name": "Hardware OEM ID", "description": "Identifier of the hardware manufacturer.", "reference": "RFC9711" }, { "claim": "hwmodel", "name": "Hardware model identifier", "description": "Model identifier for the hardware.", "reference": "RFC9711" }, { "claim": "hwversion", "name": "Hardware Version Identifier", "description": "Hardware version identifier.", "reference": "RFC9711" }, { "claim": "oemboot", "name": "OEM authorized boot", "description": "Indicates whether the software booted was OEM authorized.", "reference": "RFC9711" }, { "claim": "dbgstat", "name": "Debug status", "description": "The status of debug facilities on the entity.", "reference": "RFC9711" }, { "claim": "location", "name": "Geographic location", "description": "The geographic location of the entity.", "reference": "RFC9711" }, { "claim": "eat_profile", "name": "EAT profile", "description": "The EAT profile followed by the token.", "reference": "RFC9711" }, { "claim": "submods", "name": "Submodules", "description": "The section containing submodule claims.", "reference": "RFC9711" }, { "claim": "uptime", "name": "Uptime", "description": "The uptime of the entity in seconds.", "reference": "RFC9711" }, { "claim": "bootcount", "name": "Boot count", "description": "The number of times the entity or submodule has been booted.", "reference": "RFC9711" }, { "claim": "bootseed", "name": "Boot seed", "description": "Identifies a boot cycle of the entity.", "reference": "RFC9711" }, { "claim": "dloas", "name": "Digital Letters of Approval", "description": "Certifications received as Digital Letters of Approval.", "reference": "RFC9711" }, { "claim": "swname", "name": "Software name", "description": "The name of the software running in the entity.", "reference": "RFC9711" }, { "claim": "swversion", "name": "Software version", "description": "The version of software running in the entity.", "reference": "RFC9711" }, { "claim": "manifests", "name": "Manifests", "description": "Manifests describing the software installed on the entity.", "reference": "RFC9711" }, { "claim": "measurements", "name": "Measurements", "description": "Measurements of the software, memory configuration, and such on the entity.", "reference": "RFC9711" }, { "claim": "measres", "name": "Measurement results", "description": "The results of comparing software measurements to reference values.", "reference": "RFC9711" }, { "claim": "intuse", "name": "Intended use", "description": "The intended use of the EAT.", "reference": "RFC9711" }, { "claim": "cdniv", "name": "CDNI Claim Set Version", "description": "Version of the CDNI claim set.", "reference": "RFC9246 Section 2.1.8" }, { "claim": "cdnicrit", "name": "CDNI Critical Claims Set", "description": "CDNI Critical Claims Set.", "reference": "RFC9246 Section 2.1.9" }, { "claim": "cdniip", "name": "CDNI IP Address", "description": "CDNI IP Address claim.", "reference": "RFC9246 Section 2.1.10" }, { "claim": "cdniuc", "name": "CDNI URI Container", "description": "CDNI URI Container claim.", "reference": "RFC9246 Section 2.1.11" }, { "claim": "cdniets", "name": "CDNI Expiration Time Setting for Signed Token Renewal", "description": "CDNI Expiration Time Setting for Signed Token Renewal.", "reference": "RFC9246 Section 2.1.12" }, { "claim": "cdnistt", "name": "CDNI Signed Token Transport Method for Signed Token Renewal", "description": "CDNI Signed Token Transport Method for Signed Token Renewal.", "reference": "RFC9246 Section 2.1.13" }, { "claim": "cdnistd", "name": "CDNI Signed Token Depth", "description": "CDNI Signed Token Depth.", "reference": "RFC9246 Section 2.1.14" }, { "claim": "sig_val_claims", "name": "Signature Validation Token", "description": "A Signature Validation Token.", "reference": "RFC9321 Section 3.2.3" }, { "claim": "authorization_details", "name": "Authorization Details", "description": "JSON array of JSON objects representing the rights of the access token for fine-grained authorization.", "reference": "RFC9396 Section 9.1" }, { "claim": "verified_claims", "name": "Verified Claims", "description": "Structured claim containing end-user claims and details of how those claims were assured.", "reference": "OpenID Identity Assurance Schema Definition 1.0 Section 5" }, { "claim": "place_of_birth", "name": "Place of birth", "description": "Structured claim representing the end-user's place of birth.", "reference": "OpenID Connect for Identity Assurance Claims Registration 1.0 Section 4" }, { "claim": "nationalities", "name": "Nationalities", "description": "String array representing the end-user's nationalities.", "reference": "OpenID Connect for Identity Assurance Claims Registration 1.0 Section 4" }, { "claim": "birth_family_name", "name": "Birth family name", "description": "Family name someone had when they were born or at least from the time they were a child.", "reference": "OpenID Connect for Identity Assurance Claims Registration 1.0 Section 4" }, { "claim": "birth_given_name", "name": "Birth given name", "description": "Given name someone had when they were born or at least from the time they were a child.", "reference": "OpenID Connect for Identity Assurance Claims Registration 1.0 Section 4" }, { "claim": "birth_middle_name", "name": "Birth middle name", "description": "Middle name someone had when they were born or at least from the time they were a child.", "reference": "OpenID Connect for Identity Assurance Claims Registration 1.0 Section 4" }, { "claim": "salutation", "name": "Salutation", "description": "End-user's salutation, e.g., Mr.", "reference": "OpenID Connect for Identity Assurance Claims Registration 1.0 Section 4" }, { "claim": "title", "name": "Title", "description": "End-user's title, e.g., Dr.", "reference": "OpenID Connect for Identity Assurance Claims Registration 1.0 Section 4" }, { "claim": "msisdn", "name": "Mobile phone number", "description": "End-user's mobile phone number formatted according to ITU-T recommendation E.164.", "reference": "OpenID Connect for Identity Assurance Claims Registration 1.0 Section 4" }, { "claim": "also_known_as", "name": "Also known as", "description": "Stage name, religious name or any other alias/pseudonym with which a person is known besides their legal name.", "reference": "OpenID Connect for Identity Assurance Claims Registration 1.0 Section 4" }, { "claim": "htm", "name": "HTTP method", "description": "The HTTP method of the request to which the DPoP proof is attached.", "reference": "RFC9449 Section 4.2" }, { "claim": "htu", "name": "HTTP URI", "description": "The HTTP URI of the request (without query and fragment parts) to which the DPoP proof is attached.", "reference": "RFC9449 Section 4.2" }, { "claim": "ath", "name": "Access token hash", "description": "The base64url-encoded SHA-256 hash of the ASCII encoding of the associated access token's value.", "reference": "RFC9449 Section 4.2" }, { "claim": "atc", "name": "Authority Token Challenge", "description": "Authority Token Challenge claim.", "reference": "RFC9447" }, { "claim": "sub_id", "name": "Subject Identifier", "description": "Subject Identifier for the JWT subject.", "reference": "RFC9493 Section 4.1" }, { "claim": "rcd", "name": "Rich Call Data Information", "description": "Rich Call Data information associated with a call.", "reference": "RFC9795" }, { "claim": "rcdi", "name": "Rich Call Data Integrity Information", "description": "Rich Call Data Integrity information.", "reference": "RFC9795" }, { "claim": "crn", "name": "Call Reason", "description": "The reason for the call.", "reference": "RFC9795" }, { "claim": "msgi", "name": "Message Integrity Information", "description": "Message Integrity information.", "reference": "RFC9475" }, { "claim": "_claim_names", "name": "Claim names", "description": "JSON object whose member names are the claim names for the aggregated and distributed claims.", "reference": "OpenID Connect Core 1.0 Section 5.6.2" }, { "claim": "_claim_sources", "name": "Claim sources", "description": "JSON object whose member names are referenced by the member values of the _claim_names member.", "reference": "OpenID Connect Core 1.0 Section 5.6.2" }, { "claim": "rdap_allowed_purposes", "name": "RDAP allowed purposes", "description": "Describes the set of RDAP query purposes available to an identity presented for access to a protected RDAP resource.", "reference": "RFC9560 Section 3.1.5.1" }, { "claim": "rdap_dnt_allowed", "name": "RDAP do not track allowed", "description": "Describes a do not track request for server-side tracking, logging, or recording of an identity presented for access to a protected RDAP resource.", "reference": "RFC9560 Section 3.1.5.2" }, { "claim": "geohash", "name": "Geohash String or Array", "description": "Geohash encoded location string or array.", "reference": "CTA-5009" }, { "claim": "_sd", "name": "Selective Disclosure digests", "description": "Digests of Disclosures for object properties in SD-JWT.", "reference": "RFC9901 Section 4.2.4.1" }, { "claim": "...", "name": "Array element digest", "description": "Digest of the Disclosure for an array element in SD-JWT.", "reference": "RFC9901 Section 4.2.4.2" }, { "claim": "_sd_alg", "name": "SD-JWT hash algorithm", "description": "Hash algorithm used to generate Disclosure digests and digest over presentation in SD-JWT.", "reference": "RFC9901 Section 4.1.1" }, { "claim": "sd_hash", "name": "SD-JWT digest", "description": "Digest of the SD-JWT to which the KB-JWT is tied.", "reference": "RFC9901 Section 4.3" }, { "claim": "consumerPlmnId", "name": "Consumer PLMN ID", "description": "PLMN ID of the NF service consumer.", "reference": "3GPP TS 29.510 Clause 6.3.5.2.4" }, { "claim": "consumerSnpnId", "name": "Consumer SNPN ID", "description": "SNPN ID of the NF service consumer.", "reference": "3GPP TS 29.510 Clause 6.3.5.2.4" }, { "claim": "producerPlmnId", "name": "Producer PLMN ID", "description": "PLMN ID of the NF service producer.", "reference": "3GPP TS 29.510 Clause 6.3.5.2.4" }, { "claim": "producerSnpnId", "name": "Producer SNPN ID", "description": "SNPN ID of the NF service producer.", "reference": "3GPP TS 29.510 Clause 6.3.5.2.4" }, { "claim": "producerSnssaiList", "name": "Producer S-NSSAI list", "description": "List of S-NSSAIs of the NF service producer authorized for the NF service consumer.", "reference": "3GPP TS 29.510 Clause 6.3.5.2.4" }, { "claim": "producerNsiList", "name": "Producer NSI list", "description": "List of NSIs of the NF service producer authorized for the NF service consumer.", "reference": "3GPP TS 29.510 Clause 6.3.5.2.4" }, { "claim": "producerNfSetId", "name": "Producer NF Set ID", "description": "NF Set ID of the NF service producer.", "reference": "3GPP TS 29.510 Clause 6.3.5.2.4" }, { "claim": "producerNfServiceSetId", "name": "Producer NF Service Set ID", "description": "NF Service Set ID of the NF Service Producer.", "reference": "3GPP TS 29.510 Clause 6.3.5.2.4" }, { "claim": "sourceNfInstanceId", "name": "Source NF Instance ID", "description": "NF Instance ID of the source NF.", "reference": "3GPP TS 29.510 Clause 6.3.5.2.4" }, { "claim": "analyticsIdList", "name": "Analytics IDs", "description": "Analytics IDs.", "reference": "3GPP TS 29.510 Clause 6.3.5.2.4" }, { "claim": "resOwnerId", "name": "Resource owner ID", "description": "Contains the identifier of the resource owner, e.g., GPSI.", "reference": "3GPP TS 29.222 Clause 8.5.4.2.8" }, { "claim": "cmw", "name": "RATS Conceptual Message Wrapper", "description": "A RATS Conceptual Message Wrapper.", "reference": "RFC-ietf-rats-msg-wrap-22, Sections 3.1, 3.3" }, { "claim": "jwks", "name": "JSON Web Key Set", "description": "JSON Web Key Set (JWKS).", "reference": "OpenID Federation 1.0 Section 13.1" }, { "claim": "metadata", "name": "Metadata object", "description": "Metadata object used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 13.2" }, { "claim": "constraints", "name": "Constraints object", "description": "Constraints object used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 13.3" }, { "claim": "crit", "name": "Critical", "description": "List of claims in this JWT defined by extensions that MUST be understood and processed.", "reference": "OpenID Federation 1.0 Section 13.4" }, { "claim": "ref", "name": "Reference", "description": "Reference used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 13.5" }, { "claim": "delegation", "name": "Delegation", "description": "Delegation information used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 13.6" }, { "claim": "logo_uri", "name": "Logo URI", "description": "URI referencing a logo.", "reference": "OpenID Federation 1.0 Section 13.7" }, { "claim": "authority_hints", "name": "Authority Hints", "description": "Authority hints used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 3.2" }, { "claim": "trust_anchor_hints", "name": "Trust Anchor Hints", "description": "Trust Anchor Hints used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 3.2" }, { "claim": "trust_marks", "name": "Trust Marks", "description": "Trust Marks used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 3.2" }, { "claim": "trust_mark_issuers", "name": "Trust Mark Issuers", "description": "Trust Mark Issuers used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 3.2" }, { "claim": "trust_mark_owners", "name": "Trust Mark Owners", "description": "Trust Mark Owners used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 3.2" }, { "claim": "metadata_policy", "name": "Metadata Policy object", "description": "Metadata Policy object used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 3.3" }, { "claim": "metadata_policy_crit", "name": "Critical Metadata Policy Operators", "description": "Critical Metadata Policy Operators used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 3.3" }, { "claim": "source_endpoint", "name": "Source Endpoint URL", "description": "Source Endpoint URL used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 3.3" }, { "claim": "keys", "name": "JWK Set keys", "description": "Array of JWK values in a JWK Set used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 5.2.1" }, { "claim": "trust_mark_type", "name": "Trust Mark Type Identifier", "description": "Trust Mark Type Identifier used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 7.1" }, { "claim": "trust_chain", "name": "Trust Chain", "description": "Trust Chain used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 8.3.2" }, { "claim": "trust_anchor", "name": "Trust Anchor ID", "description": "Trust Anchor ID used in OpenID Federation.", "reference": "OpenID Federation 1.0 Section 12.2.3" }, { "claim": "status", "name": "Status", "description": "A JSON object containing a reference to a status mechanism (such as a Token Status List) from the JWT Status Mechanisms Registry.", "reference": "draft-ietf-oauth-status-list Section 6.1" }, { "claim": "status_list", "name": "Status List", "description": "A JSON object containing up-to-date status information on multiple tokens using the Token Status List mechanism.", "reference": "draft-ietf-oauth-status-list Section 5.1" }, { "claim": "ttl", "name": "Time to Live", "description": "Maximum time in seconds that a Status List Token may be cached before a fresh copy should be retrieved.", "reference": "draft-ietf-oauth-status-list Section 5.1" }, { "claim": "stpl", "name": "OCSP Staple", "description": "OCSP response stapled to a STIR PASSporT so verifiers can check the signing certificate's revocation status.", "reference": "draft-ietf-stir-certificates-ocsp" } ]