When calling the /tokeninfo (Authentication API Explorer) API with a valid token, I am getting a 404 - Not Found error.
The same call works on an older tenant. Is this endpoint still available on new tenants ? (even if I turned off the OIDC Conformant toggle for my new tenant ?)
/tokeninfo endpoint is part of the legacy authentication flows and yes they are disabled in the new tenants.
In new tenants full support instead of /tokeninfo is reflected as below:
For access tokens, we use the POST /userinfo endpoint (which also returns the user profile). ID tokens should be validated by the client.