I'm currently working on a project related with OpenID Connect Back-channel logout. I need to include sid as a claim in the logout token as mentioned in the specification.
sid- OPTIONAL. Session ID - String identifier for a Session. This represents a Session of a User Agent or device for a logged-in End-User at an RP. Different sid values are used to identify distinct sessions at an OP. The sid value need only be unique in the context of a particular issuer. Its contents are opaque to the RP. Its syntax is the same as an OAuth 2.0 Client Identifier.
From the explanation for sid, I have some confusions whether it tells about the session-id of the end-user at RP or about the session-id of the RP at OP.
Thanks in advance.