Glossary: Identity and Access Management

claims

Also written: claim

The fields in a JWT's payload, such as `iss`, `sub`, `aud`, `exp`, `iat`, `name` and `email`. An app must check the token's signature before trusting any claim.