!!! Overview [{$pagename}] (for [Subject]) is a [Claim] used in various [Tokens] !! [OpenID Connect] [Identity Token] [OpenID Connect] [Identity Token] [{$pagename}] is a Subject Identifier is a locally unique and never re-assigned identifier within the Issuer for the [Authenticated] [Entity], which is intended to be consumed by the [OAuth Client]. Two Subject Identifier types are defined by [OpenID Connect]: * public - provides the same sub (subject) value to all [OAuth Client]. It is the default if the provider has no [subject_types_supported] element in its discovery document. * pairwise - provides a different [{$pagename}] value to each [OAuth Client], so as not to enable [OAuth Client] to [correlate|Identity Correlation] the End-User's activities without permission. The [OpenID Connect Provider]'s [OpenID Connect Discovery] document [SHOULD] list its supported Subject Identifier types in the [subject_types_supported] element. If there is more than one type listed in the array, the [OAuth Client] [MAY] elect to provide its preferred identifier type using the [subject_type] parameter during Registration. [{$pagename}] __ MUST NOT__ exceed 255 [ASCII] characters in length. [{$pagename}] [{$pagename}] value is a [Case-sensitive] string. !! [JSON Web Token] The "sub" (subject) __OPTIONAL__ [Reserved Claim Name] identifies the [principal] that is the [subject] of the [JSON Web Token]. The [JSON Web Token Claim] in a [JWT] are normally statements about the [subject]. The subject value [MUST] either be scoped to be locally [unique|Unique Identifier] in the [context] of the [JSON Web Token] [issuer] or be __Global [unique|Unique Identifier]__. The processing of this [JSON Web Token Claim] is generally [application] specific. The "[{$pagename}]" value is a [Case-sensitive] string containing a [StringOrURI] value. !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }]