sub claim
RU: sub claim
The subject claim in a JWT or OIDC token: a string that uniquely identifies the principal (typically a user or service account) within the issuer's namespace. The combination of iss and sub is the only stable, never-reassigned identifier an application can rely on across tokens.