RFC 9207: whether the AS includes the iss parameter in authorization responses. When true, clients MUST require and validate iss.
RFC 9207: whether the AS includes the iss parameter in authorization responses. When true, clients MUST require and validate iss.