Identity token does no scopes when using authorization code flow

Duplicate of this thread: