RFC 9207 further defines Iss and that in the Authorization Response to the client, including error responses, an Authorization Server supporting this specification MUST indicate its identity by including the iss parameter in the Authorization Response
The processing of this claim is generally application specific.
The "Iss" value is a case-sensitive string containing a StringOrURI value.