Glossary: Identity and Access Management

audience

The app that a token or assertion is meant for. An app must refuse anything addressed to a different app, or a weak app could replay sign-ins into a stronger one.