@sphcow @vibronet It was the id_token, I often tell this story to implementers. For who intends to use the id_token for interoperability purpose or like an authentication factor the tales of Bertocci works fine, they hear it the first time and they don't do it anymore. Tested.