Trying to understand where to use Access Token vs ID token. Auth0 is setup as the SP for on Application. We have configured a SAML connection to our IDp (which is connected to our Internal Active Directory). The internal users will have certain defined roles in the application which we are passin…

Hi @kris.macgillivray , ID Tokens should never be used to obtain direct access to APIs or to make authorization decisions. Therefore I would recommend putting the role information into your Access Tokens . Any actual decisions made with respect to a user’s roles should be done from the information …

Id Token vs Access Token

Get Help

system Closed February 11, 2022, 1:57pm 4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Appropriate token usage for 1p webapp Get Help jwt , oidc , access-token , id-token	2	2144	September 27, 2022
Using only ID Token, with own roles/permissions database Get Help	2	1550	May 23, 2022
Access Tokens vs. ID Tokens Knowledge Articles access-token , id-token	1	73	September 12, 2024
Clarify the usage of ID token for authenticating to an API you own Get Help	3	5046	May 28, 2019
Access token vs id token usage Get Help	3	3811	August 30, 2019

Id Token vs Access Token

Related topics