Magebean Logo Magebean
← Back to Baseline

MB-R257

HUMAN VERIFICATION REQUIRED ASVS 10.5.2 Stable OIDC identity (when oauth_oidc is used)

MB-C16 ASVS Level 2 Contextual Human Assurance High

The client uniquely identifies the user from ID Token claims, usually the 'sub'claim, which cannot be reassigned to other users (for the scope of an identity provider).