Which token types should be requested from OIDC Identity Provider?

Question

My identity provider is asking which tokens I need to authorize for setting up an Open ID Connect single sign on.

The options are:

* code
* id_token
* access_token
* refresh_token

Which ones are required for ArcGIS Enterprise Portal 11.5?

JeffSmith · Accepted Answer

In most cases returning the id_token is sufficient.  This assumes the id_token includes the user profile information like name and email address.  If this information is not present in the id_token, Portal for ArcGIS will try to access the user profile url to retrieve this and usually requires an access_token for that.