Identity Basics

Access vs ID tokens

What each token claims, and where each one belongs
Report issue

Covers the difference between an ID token, which says who the user is, and an access token, which says what the caller is allowed to do, and why sending the wrong one to an API is a common integration mistake.