For SSO ,You can use Id token to verify using jwt package and use jwt.decode or go to official jwt.io site. With access token if you want to try ,then you need private and public keys.