Provisioning the IAIso consent issuer

When this applies

First deployment, or when adding a new issuer for a new environment / tenant. The token issuer is the trust anchor for every privileged action — get it right.

Steps To Complete

1. Choose HS256 vs RS256.

   • HS256: symmetric. Issuer and verifier share a 64-byte secret. Simpler, faster (~30µs verify). Use within a single trust boundary.
   • RS256: asymmetric. Issuer holds private key, verifiers hold public key. Use when verifiers and issuer cross trust boundaries (multi-team, multi-tenant, third-party integrations).