Comment by humanlity

How can I solve this problem cheaply? Here are a few thoughts:

- Generate an encrypted token based on the redirect state value. - Store the mapping of tenant_id and unique state. - wait Microsoft support wildcard redirects.