When populated, a signed JWT client_assertion is sent in place of client_secret.
idp
audience
acr_values
Register https://example-app.com/client as a redirect URI for your OAuth client
https://example-app.com/client