Doesn’t Azure AD have a metadata document that lists the `issuer` for v1 access tokens? The OpenID Connect metadata document for an Azure tenant is:
