[keycloak-user] IDToken vs AccessToken

Hi I noticed that when using Bearer, an AccessToken gets set in the KeycloakPrincipal's SecurityContext. However, when I do an SP initiated login the IDToken gets set. I was wondering if these two could be consistent, or if the inconsistency were at least explainable? I'm also wondering, will the presence of a bearer header cause the keycloak adapter cookie to get set? John