Controls how certificate binding is validated for certificate-bound access tokens.
Validates certificate binding only when the token carries a cnf (confirmation) claim.
cnf
Always validates certificate binding, rejecting tokens without a cnf claim.
Never validates certificate binding, even when the token carries a cnf claim.
Controls how certificate binding is validated for certificate-bound access tokens.