IEC 62351 - Power Systems Communication Security 8:8: Part 8, clause 8: definition of access tokens (mandatory and optional components, profiles A X.509 public-key certificate, B X.509 attribute certificate, C JSON Web Token, D RADIUS, E LDAP)

An access token carries the subject's role information to the target system in one of five profiles: an X.509 public-key certificate extension, an X.509 attribute certificate, a JSON Web Token, RADIUS-provided information or LDAP-provided information, each with the profile's mandatory components (subject, issuer, validity, role identifier, revision, area of responsibility, role definition, revocation information, operation, sequence number) and optional components and the RBAC object identifiers.