Multiple audiences are not supported in an idToken, but you can have multiple audiences in an access token. Is it possible to request multiple audiences with an access token, or is it that you can only request one audience, but may receive more than one?
I consulted it internally. It is not doable with access tokens.
When it comes to ID Token, they can have multiple audiences, we just do not have any flow where we would issue one with multiple audiences. This by itself is not an issue, as not everything in the spec is mandatory to implement.
We just don’t have any scenario currently where we end-up issuing ID tokens with multiple audiences