When Identity Scopes are used in the authentication request, your application can retrieve additional information about the authenticated user from the userinfo endpoint. The application needs to use the obtained Access Token when calling this endpoint.

Example:

curl --request GET --url https://connect.visma.com/connect/userinfo --header 'authorization: Bearer [YOUR_ACCESS_TOKEN]'

{ 
 "sub": "1072cd43-d99a-4d44-84a2-5f80720c1a19", 
 "name": "John Doe",
 "given_name": "John",
 "family_name": "Doe",
 "email": "john.doe@visma.com",
 "email_verified": true,
 "idp": "Visma Connect", 
 "auth_time": "1472622102",
 "sid": "11474d36-22a3-40d8-925d-21af17826e38" 
}

The claims returned by userinfo endpoint depend on the Identity Scopes used on the authentication request.