# What are JWKS and KID?

**URL:** <https://developer.community.nhs.uk/t/what-are-jwks-and-kid/15552>\
**Category:** API access and APIM\
**Tags:** onboarding\
**Created:** [6 October 2026 10:37 UTC](https://developer.community.nhs.uk/t/what-are-jwks-and-kid/15552 "2026-10-06T10:37:01Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Adedayo\_Okunade](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@Adedayo\_Okunade](https://developer.community.nhs.uk/u/Adedayo_Okunade)\
**Post date:** [6 October 2026 10:37 UTC](https://developer.community.nhs.uk/t/what-are-jwks-and-kid/15552/1 "2026-10-06T10:37:01Z")

</div>

A JSON Web Key Set (JWKS) publishes the public keys used to verify signed authentication assertions. See [Signed JWT authentication](https://digital.nhs.uk/developer/guides-and-documentation/security-and-authorisation/application-restricted-restful-apis-signed-jwt-authentication).

A Key ID (KID) identifies the specific public key that should be selected from the key set.

The JWKS, KID and any public-key information supplied for BaRS access must match the application registered through Digital Onboarding.