What this test does

Every time your server redirects back here, including with errors, checks the iss parameter.

How it passes

iss is present and exactly equal to the issuer in the metadata.

Specification
§5.2.1, RFC 9207 §2
Needs
S105 Issuer identifier is valid