...
This access token
does not contain any information about the user except the ID
(sub / subject).
Claims in access token
...
Certain claims can be limited by size in the access token, to avoid HTTP header oversize in some situations. Each claim type can be limited separately in servicecorelogin_claim_type table.
...
When the column size_limit_in_kb value is set to a number greater than ‘0’, then indicated claim type will be limited to the specified size in kilobytesby setting the size limit in kb setting in the claim configuration user interface.
Identity Token
Whenever an application requires any information about the user that was authenticated, it should use the OpenID Connect Protocol to get an ID token. This ID token contains the requested information about a user such as the first or last name.
...