Extract and return "idpClaims" and "userClaims" dicts.
Support "iat" field in certifications and assertions.