Which token types should be requested from OIDC Identity Provider?

[GSpeed_UU]

My identity provider is asking which tokens I need to authorize for setting up an Open ID Connect single sign on. 

The options are: 

• code
• id_token
• access_token
• refresh_token
  

Which ones are required for ArcGIS Enterprise Portal 11.5?

[JeffSmith · Accepted solution]

In most cases returning the id_token is sufficient.  This assumes the id_token includes the user profile information like name and email address.  If this information is not present in the id_token, Portal for ArcGIS will try to access the user profile url to retrieve this and usually requires an access_token for that.