Audience (aud) - CI/CD Glossary Definition

The audience claim (aud) names the intended recipient of a token; a verifier must reject a token whose audience does not match itself to prevent token reuse against the wrong service.

Why validate it

Without audience validation, a token minted for service A could be replayed against service B. Always check that aud equals your own identifier.

In CI/CD

When requesting an OIDC token, set the audience to the specific cloud or API you will call so it cannot be reused elsewhere.

Related guides