Understanding UAA and ID Tokens

The ID Token contains claims about the authentication of an end-user by the authorization server, and can optionally contain other requested claims. For more information on ID tokens, see the OpenID Connect Core 1.0 specification.

You can obtain ID tokens for the following authorization grant types:

• Authorization Code (response_type=code)
• Implicit (response_type=id_token token or response_type=id_token)
• Hybrid (using other response type values defined in OAuth 2.0 Multiple Response Type Encoding Practices [OAuth.Responses])