In the Access Token the sub claim is the email of the user. In the ID Token the sub claim is the unique identifier of the user. Why is this?

As @Govner pointed out, this is per OpenID Connect (OIDC) Spec, which states that… A Subject Identifier is a locally unique and never reassigned identifier within the Issuer for the End-User, which is intended to be consumed by the Client. The sub claim is further defined in RFC 7519 , which defi…

I’m sorry, but just providing a link with no additional context is not a helpful answer. The answer may very well be in plain sight in the document you linked to, but I for one, cannot see it (and I imagine I’m not the only one that is still left scratching their heads). I would like to revive thi…

Would be nice to have your own immutable guid that is the same across both. So it looks like the max size for the id (sub in id token) is 20 is that correct and is their a regex for this?

Why is the `sub` claim in the Access Token and ID Token different?

Questions

Govner January 22, 2019, 8:10am 2

https://openid.net/specs/openid-connect-core-1_0.html#SubjectIDTypes

Post		Replies	Views
Can I trust the access token sub claim for identifying user? Questions	6	13544	February 4, 2022
How may I access the value of the`sub` claim in the ID Token from admin portal? Questions	2	5521	July 15, 2019
Get unique id on endpoint /userinfo Questions	2	3820	December 15, 2019
Token error - 400 sub system claim cant be evaluated OAuth/OIDC api	8	8018	July 27, 2021
To modify the "sub" field in the id token in the trial version Questions	3	2328	February 15, 2024

Why is the `sub` claim in the Access Token and ID Token different?

Related topics