TOidcClient.SkipIssuerValidation Property
Gets or sets whether issuer validation is skipped during ID token processing.
Remarks
When False (the default), the iss claim in the identity token must exactly match the Authority value, and the issuer returned by the OpenID Connect discovery document must also match Authority.
For multi-tenant identity providers -- for example, Microsoft Entra using the organizations or common authority -- the issuer is a template containing a {tenantid} placeholder (e.g. https://login.microsoftonline.com/{tenantid}/v2.0).
This placeholder is resolved automatically with the token's tenant id (tid) claim before validation, so issuer validation can be kept enabled for those providers and this property left False. Set to True only as a last resort to disable issuer validation entirely, or use OnValidateIssuer to supply custom validation logic in place of the standard check.
Syntax
Unit: Sphinx.OidcClient
property TOidcClient.SkipIssuerValidation: Boolean