[Azure AD v2.0](https://docs.microsoft.com/en-us/azure/active-directory/active-directory-v2-tokens) provides OIDC config via: https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration Issuer in the config json is returned as `https://login.microsoftonline.com/{tenantid}/v2.0` As a result `NewProvider()` method fails.