contain a `JWT` member whose value is a JWT that contains all claims in `_claim_names` that reference the corresponding `_claim_sources` member..

Condition: When an `_claim_sources` member provides aggregated claims.

JSON object that MUST contain the JWT member whose value is a JWT that MUST contain all the Claims in the _claim_names object

contain members other than `JWT`..

Condition: When an `_claim_sources` member provides aggregated claims.

Other members MAY be present.

return the claim as a JWT..

Condition: When retrieving an associated distributed claim from the endpoint URL.

The endpoint URL MUST return the Claim as a JWT.

include an endpoint URL from which the associated claim can be retrieved..

Condition: When an `_claim_sources` member provides distributed claims.

REQUIRED. OAuth 2.0 resource endpoint from which the associated Claim can be retrieved.

include an access token enabling retrieval of the claims from the endpoint URL..

Condition: When an `_claim_sources` member provides distributed claims.

OPTIONAL. Access Token enabling retrieval of the Claims from the endpoint URL

ignore `_claim_sources` source-object members it does not understand..

Condition: When processing aggregated claims source objects.

Any members used that are not understood MUST be ignored.

be prepared to handle the condition that some claims listed in `_claim_sources` are not returned from the Claims Provider..

Condition: When processing distributed claims.

RPs MUST be prepared to handle the condition that some Claims listed in _claim_sources are not returned from the Claims Provider.