This repository was archived by the owner on Dec 8, 2025. It is now read-only.
Introduction - Needs rework #1
Description
Technically in an id_token the sub is scoped to iss. This scoping protects user from impersonation by another IDP, portable identities need other solution for achieving this goal e.g by making the subject identifier cryptographically verifiable there are new opportunities to safely seperate out the relationship the End-User has to the provider.