{
  "subjects": [
    {
      "id": "lifecycle-human-profile",
      "type": "Human",
      "display_name": "Human identity contract profile",
      "groups": [
        "net-kingdom-admins"
      ],
      "claims": {
        "assurance": "aal2",
        "principal_type_source": "authentication-derived",
        "tenant_source": "registration-supplied"
      }
    },
    {
      "id": "lifecycle-workload-profile",
      "type": "Service",
      "display_name": "TokenReview identity contract profile",
      "claims": {
        "principal_type_source": "authentication-derived",
        "tenant_source": "registration-supplied",
        "authentication_audience": "informed-decision-lifecycle",
        "workload_uid": "TokenReview response UID"
      }
    }
  ],
  "resources": []
}