In the dox42 Online Platform Description you can find relevant security information, as well as a detailed overview of the Microsoft Entra ID Token Flows.