The audience
parameter is only if you have configured an API, and require an access token in order to make calls to the API. If you do not have an API configured, try removing this parameter.
The sub
claim in the id_token will be the unique ID of the user. More information regarding the ID token claims are available here: