From my understanding, access token is for the backened application .This will do the authorization. ID token is for authentication.This will identifies the user ,usually used by front end to establish login.Normally it never goes to backend. ID Token for user identity and Access Token for resource access.