The validation of the ID token includes evaluating both the payload and the digital signature.