We have a use case similar to the one listed in the below url - basically once a user is
authenticated, a client application after receiving the tokens from the Provider, shares
the tokens with a few other applications that are in a group. The other client
applications should be able to verify the tokens without requiring any more user
interaction. In the OIDC world, unfortunately, the aud parameter has the clientid of the
first app only and it will fail validation by the other apps. So, is there any way this
can be handled in KC?
https://developers.google.com/identity/protocols/CrossClientAuth