Does AuthCodeReceived really need to use tenant-specific endpoint?

[dstrockis]

Does AuthCodeReceived really need to use tenant-specific endpoint?

[vibronet]

It does save results in the cache, but I know what you mean. If you use Common, certain flows won't work. For example, if the customer would switch to use certificates, the code would stop working.
As a general rule, we use Common when there is ambiguity and we need the user to solve it. When there is no ambiguity, we should use what we know to reduce the chance of unintended consequences. Only exceptions would be if the necessary code would be too complex, in which case tradeoffs should be considered.

[dstrockis]

Got it, thank you!