Pomerium adds a signed JWT token to the incoming request headers (X-Pomerium-Jwt-Assertion) which can then be used to assert a user's identity details.

Pomerium allows passing identity to upstream applications as HTTP request headers. Note, unlike x-pomerium-jwt-assertion these headers are not signed.

A complete dump of the values on this page can be found at the /json endpoint.