title: OpenID Connect multiple audiences in access token
body: <p>What OpenID Connect provider should do, if client requested scopes for many audiences? For example:</p>
  <p>Api Resource A use these scopes: test.read</p>
  <p>Api Resource B use these scopes: test.write</p>
  <p>Client can request test.read and test.write, he has been allowed to use both. But now what to do with audience in access token, if client requested test.read and test.write? Audience should be only one, so I can't do something like it:</p>
  <pre><code>{
    &quot;audience&quot;: &quot;ApiResourceA ApiResourceB&quot;
  }
  </code></pre>
  <p>What does the OIDC provider have to do in this case?</p>