Glossary: Web App Security and Authentication

sub

Also written: email_verified

The provider's permanent id for a person in an ID token. email_verified says whether the provider confirmed the email, and kc-shop trusts email only when it's true.