‘acr’ Claims in ID Token

If the LoA is defined in an authentication policy, when asking for an ID Token via the OpenID token endpoint, the acr claim will be included in the ID Token.

The following is a non-normative example of the set of Claims (the JWT Claims Set) in an ID Token:

Copy 
{
   "at_hash": "wcvmNj4esm3C-8sY2bmB9Q", 
   "iss": "https://server.example.com",
   "sub": "24400320",
   "aud": "s6BhdRkqt3",
   "nonce": "n-0S6_WzA2Mj",
   "exp": 1311281970,
   "iat": 1311280970,
   "auth_time": 1311280969,
   "acr": "2"
  }