Identity Token
In addition to authentication, CXM allows applications to request the identity
of the authenticating user. This information is provided in a JSON Web Token,
which is included in the response to the token request when openid
is
specified in the scope
parameter of both the initiating authentication
redirect and the subsequent token request.