(registered 2024-11-26, last updated 2024-11-27)

Media type name: application

Media subtype name: provided-claims+jwt

Required parameters: N/A

Optional parameters: N/A

Encoding considerations: binary

An external claims JWT is a JWT; JWT values are encoded as a series of base64url-encoded values (some of which may be the empty string) separated by period ('.') characters.

Security considerations: See https://openid.net/specs/openid-connect-4-identity-assurance-1_0-final.html#name-security-considerations

Interoperability considerations: N/A.

Published specification: OpenID Connect for Identity Assurance 1.0, Section 5.2: https://openid.net/specs/openid-connect-4-identity-assurance-1_0-final.html#section-5.2

Applications which use this media: When using OpenID Connect for Identity Assurance 1.0, this media type is used in the typ header of assertions provided as aggregated or distributed claims (see section 5.6.2 of the OpenID Connect specification [OpenID]).

Fragment identifier considerations: N/A

Restrictions on usage: none

Additional information:

1. Deprecated alias names for this type: none
2. Magic number(s): none
3. File extension(s): none
4. Macintosh file type code: none
5. Object Identifiers: none

Person to contact for further information:

1. Name: Daniel Fett
2. Email: mail&danielfett.de

Intended usage: COMMON

Author/Change controller: OpenID Foundation eKYC & IDA Work Group