Open
Description
In OIDC the userinfo may be included in the authorization response/id token but it does not have to be so. For example Azure AD can provide some claim information in the authorization response/id token but to get the full set of information you need to call that userinfo_url fetched from the warmup.
Luckily the request is pretty easy: https://openid.net/specs/openid-connect-core-1_0.html#UserInfo