oid — Object ID
Location: payload · Vendor: Microsoft Entra
The immutable GUID identifying the user or service principal within the tenant's directory, stable across app registrations and independent of any renamed UPN. Prefer this over upn/preferred_username as the durable identifier to store, since those can change while oid cannot.
Defined in Microsoft identity platform token reference.
Decode a JWT and inspect its oid claim in the TokenPrism debugger — free, entirely in your browser.