The SD-JWT VC IAE binding defines:
the aud claim in the Key Binding JWT MUST be set to the derived Origin
The W3C IAE binding defines:
the aud claim value MUST be set to the Interactive Authorization Endpoint
I think this should all use the IAE endpoint instead of the derived origin If I understood recent changes correctly?