You are implementing user identification for a web app that uses the Microsoft identity platform. Which claim type should you use to uniquely identify a user?

The oid (object ID) claim is the immutable, globally unique identifier for a user object in Azure Active Directory (Azure AD). It remains constant across all applications and sessions, making it ideal for uniquely identifying a user. The aud (audience) claim identifies the recipient of the token, typically the application's client ID, not the user. The nonce claim is a cryptographically random string used to mitigate replay attacks, not for user identification. The idp (identity provider) claim indicates the identity provider that authenticated the user, which could be Azure AD, a federated identity provider, or a social identity provider, but it doesn't uniquely identify the user themselves.