ID token containing user identity information Present only in authorization code redemption response (grant_type=authorization_code) Not included in token refresh responses