Begin Microsoft (Entra ID) OIDC sign-in
GET /auth/microsoft/start
Generates a signed state and 302-redirects the browser to the Microsoft authorize endpoint.
Request
Redirect to Microsoft authorize endpoint.
Microsoft OIDC client is not configured on this environment.