Glossary: Identity and Access Management

JWT (JSON Web Token)

Also written: JWT, JWTs, jot

A signed token made of three Base64url parts joined by dots: a header, a payload of claims and a signature. Anyone can read one, so it must never hold secrets, and an app must check its signature before trusting it.