Errata exists for this version of the document.

A statement in an Access Token that asserts information about the subject which the Authorization Service knows to be true.

Note 1 to entry: Claims can include username, email, and Roles granted to the subject.