...
At authentication time a on_behalf_of parameter with value set to the organization number configured in the OBO entry should be passed to the authorization endpoint of HelseID.
If an on-behalf-of valte value is passed on to ID-porten, this will be reflected in tokens from HelseID in the claim «helseid://claims/client/on_behalf_of» which will contain the organization number which the user was authenticated on behalf of.
...