Skip to content

Commit 2593893

Browse files
committed
add id token claims
1 parent 0b38d24 commit 2593893

File tree

1 file changed

+13
-0
lines changed
  • src/pages/guides/authentication/AdminAuthentication

1 file changed

+13
-0
lines changed

src/pages/guides/authentication/AdminAuthentication/ims.md

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,19 @@ https://id.adobe.com/consent
3232
| state | Yes | Adobe echoes back the value of the state parameter you supplied | Same as the value you supplied in the consent URL. |
3333
| id_token | No | Adobe provides an id token to enable the partner app to generate access tokens. This parameter is only present if the admin provided consent to your application. | A well formed JSON web token. |
3434

35+
36+
### Id Token Claims
37+
38+
| Claim Name | Description | Type |
39+
|------------------|---------------------------------------------------------------------------------------------------------------------------------------|------------------------------------|
40+
| iss | The issuer of the id token. This will always be `https://ims-na1.adobelogin.com/ims` | String |
41+
| sub | The subject. More specifically, it's the technical account id of the consenting org. | String |
42+
| aud | The token audience, or the application that is supposed to use this token. This will always be the client ID of the partner app. | String |
43+
| exp | Unix seconds timestamp representing the expiry date of the token | Integer |
44+
| iat | Unix seconds timestamp representing the timestamp when the token was issued | Integer |
45+
| org_id | The organization ID of the customer who provided consent to the partner app. This is used to generate access tokens for this customer. | String |
46+
| nonce | The nonce value provided in the consent URL. This is used to protect against replay attacks. | String |
47+
3548
### Error codes
3649

3750

0 commit comments

Comments
 (0)