Browser → Cognito hosted UI (delwp-dev) → Entra ID → back here → HTTP API with JWT authorizer.
Sign in with DEECASign out