hd — Hosted Domain

Location: payload · Vendor: Google

The Google Workspace (formerly G Suite) domain the account belongs to, present only for Workspace-managed accounts. Applications that want to restrict sign-in to a specific company domain must check this explicitly — its absence means the account is a regular consumer Google account, not "any domain."

Defined in Google OpenID Connect.

Decode a JWT and inspect its hd claim in the TokenPrism debugger — free, entirely in your browser.