ReferenceOIDC claims
OIDC claims
Standard and Olympus-specific OIDC claims
The ID token and userinfo response can include these claims. Per-page detail follows.
| Claim | Type | Source |
|---|---|---|
sub | string | Hydra/Kratos |
iss | string | Hydra |
aud | string or array | Hydra |
iat | integer | Hydra |
exp | integer | Hydra |
nbf | integer | Hydra |
jti | string | Hydra |
auth_time | integer | Kratos via Hydra |
acr | string | Kratos via Hydra |
amr | array of strings | Kratos via Hydra |
azp | string | Hydra |
nonce | string | Client → Hydra |
email | string | Kratos identity traits |
email_verified | boolean | Kratos identity verifiable_addresses |
name | string | Kratos identity traits |
given_name | string | Kratos identity traits |
family_name | string | Kratos identity traits |
preferred_username | string | Kratos identity traits |
locale | string | Kratos identity traits |
ext | object | Olympus custom claims |
Custom claims live in ext.* or as identity traits. See Cookbook, Add custom claim.