📜 Entity Statements
Signed documents that carry trust — cracking open a JWT
What's a JWT? (30-second version)
An Entity Statement is a JSON Web Token (JWT)[1] — a compact, signed JSON document with three parts separated by dots:
eyJhbGciOiJSUzI1NiIsInR5cCI6ImVudGl0eS1zdGF0ZW1lbnQrand0In0.eyJpc3MiOiJodHRwczovL2xvZ2luLnVuaS5lZHUiLC....SflKxwRJSMeKKF2QT4fwpM...
Header (algorithm, type) · Payload (claims) · Signature (cryptographic proof)
Two Types of Entity Statements
Entity Configuration
Published at .well-known/openid-federation[2]. iss equals sub — the entity describes itself. Signed with the entity's own private key.
Explore Every Claim
Click any claim to see its full definition from Section 3.1.1–3.1.3 of the spec.
Real-World Analogy
Entity Configuration = a self-issued ID card — you write your own name and sign it yourself. Subordinate Statement = a notary's certification — someone higher up vouches for you, signed with the notary's own signature.