...
If successful, an access token is returned. This token contains the claims of the logged user. You can base64 decode it or make another request to the userinfo_endpoint (see later).
Authorization code flow
This Oauth2 flow is used in cases where the IM is using identity brokering with other Identity Providers, such as SAML2.
...