A JSON Web Key Set (JWKS) publishes the public keys used to verify signed authentication assertions. See Signed JWT authentication.
A Key ID (KID) identifies the specific public key that should be selected from the key set.
The JWKS, KID and any public-key information supplied for BaRS access must match the application registered through Digital Onboarding.