Glossary: Web App Security and Authentication

Issuer

Also written: iss, aud, audience

The provider's base URL, also the iss claim in its tokens. The aud claim names the client id the token was made for, and openid-client checks both.