title: What id_token clain to use for multi-tenant app?
body: <p>I would need to build a REST API layer for a multi-tenant system. Essentialy the users can come from different tenants and I would like to use OIDC. First I need to find out a way to identify in the token the tenant/direcatory/realm the user in coming from. Looking at JWT id_token I understand I could use the <code>iss</code> claim for that. For example with Azure AD I would find in it the tenant-ID which is what I need, but with Google I would always find the <strong>constant</strong> string <code>https://accounts.google.com</code>. So it looks that <code>iss</code> is not the way to go. Maybe I would need to rather process the <code> aud</code> claim? Any suggestion?</p>