verify if it is possible to have an username collision in the accessId token

[thiagomanel]

If so, an user may see others made by another user (if they share the same name). In summary, is the username an unique identifier?