    rules: // optional
                - claim: iss
                    match: ALL
                    source: access_token
                    values:
                    - &lt;expected-issuer-id&gt;
                - claim: scope
                    match: ALL
                    source: access_token
                    values:
                    - openid
</code></pre><p><a href=https://github.com/ibm-cloud-security/app-identity-and-access-adapter>Read more about protecting web applications</a></p><h2 id