I may finally have a solution, although not as simple as if Auth0 didn’t return a non-jwt access token. I set the audience to: ‘https://site.name/api/’ and add the /api/ to the API list (even though it is on the same site.name… This seems to work. Interesting enough, if you request the auth0.com/adfs/.well-known/openid-configuration/ . it doesn’t return a logout URL, yet there is one (/logout). Sounds like a bug in the Openid-configuration.
-C