If Authorized party is present, it MUST contain the OAuth 2.0 Client_id of this party. This Claim is only needed when the id_token has a single audience value and that audience is different than the authorized party.
Authorized party MAY be included even when the Authorized party is the same as the sole audience.
Authorized party value is a case-sensitive string containing a String or URI value.