Hi Thomas,

You are right an access token for custom app cannot be used with userinfo endpoint. Azure’s own recommendation is to use ID token as it has all claims available from userinfo endpoint and some more.

Also see this comment on Github from Microsoft.