Google introduces new OpenID Connect standard claims, auth_time and amr, in Sign in with Google to give applications deeper insight into how and when a user authenticated. The claims enable dynamic, risk-based access controls and help defend against phishing and account takeover.