In this video, it quickly explains the most basic concepts behind modern authentication, the tokens (ID/access) that are used, and how to call them, in order to archive single sign-on.
See the format of the id_token that received by app, including JWT, alg, iss, aud, exp, sub, oid, tid.
Links:
- https://docs.microsoft.com/en-us/azure/active-directory/develop/