idToken generated by impersonation does not contains 'kid' property

[James.Morrison]

I was able to find some more details relating to the kid property via an older community post. It may not be needed for what you are trying to accomplish. I have put a link below to the topic. Please let me know if this helps in your quest, thanks!

@jmangelo

If you plan to depend on kid or use a library that does then it’s likely that library also allows you to provide the jwks.json endpoint mentioned above. This means that library receives token, get kid from token, gets key from endpoint and validates token assuming a matching key is found. So technically you don’t need to store kid anywhere, if you’re using it then you get it from the token and use it to find the matching key.