SSO and ADFS

In conclusion, in this particular case it’s not a textbook case of the specification says it is like that; it’s an inherent characteristic of using OIDC compliant authentication in Auth0.