In accordance with OpenID Connect 1.0 Core, draft 36 incorporating errata set 3: > aud > REQUIRED. Audience. The aud (audience) Claim. [...] The Audience value MUST be the OP's Issuer Identifier passed as a string, and not a single-element array.