title: How does Azure AD validates against the windows credentials[ login.microsoftonline.com/ <tenant_id>/oauth2/authorize ]
body: <p>We have internal tools and are access through SSO Azure AD. I am curious to know how this Azure AD validate against windows credentials.
   For example say, 
  1) we have internal DEV env. https::/auth/v1/session/profile so when I call this instance it redirects to <a href="https://login.microsoftonline.com/" rel="nofollow noreferrer">https://login.microsoftonline.com/</a>/oauth2/authorize?response_type=code&amp;scope=directory.read.all&amp;response_mode=query&amp;redirect_uri=&amp;client_id=>&amp;resource=&amp;state=&amp;nonce=&amp;sso_nonce=&amp;mscrid= .
  2) After entering the email id it redirects to https::/auth/v1/token with the JWT token as response. 
   So curious to know in #1 how does the login.microsoftonline.com validates that I am the authorized user. Does it takes windows credentials internally or take some session from my window system? Please clarify.  </p>