We need Identity to provide time at which the user was signed in so that it can be included as an auth_time claim.