POSTs /v1/user/credentials with the access token as Bearer auth and the ID token in the body. Both must come from the same sign-in.
POSTs /v1/user/credentials with the access token as Bearer auth and the ID token in the body. Both must come from the same sign-in.