access_token not added as claim on the ClaimsIdentity after login to asp.net app

The access_token is issued to the client application (i.e. the web app, or a mobile app, or an SPA) to access the API on behalf of the user.