tid — Tenant ID

Location: payload · Vendor: Microsoft Entra

The GUID of the Entra ID (Azure AD) tenant the token was issued from. Multi-tenant applications should check this against an allow-list of expected tenants — accepting any tid is equivalent to trusting sign-in from any organization on the planet.

Defined in Microsoft identity platform token reference.

Decode a JWT and inspect its tid claim in the TokenPrism debugger — free, entirely in your browser.