For AD FS openid connect the ADFS admin may need to enable cors headers

[mmattel]

AD is an identity and access management (IAM) solution while
ADFS is a security token service (STS)

See:

• https://learn.microsoft.com/de-de/windows-server/identity/ad-fs/operations/customize-http-security-headers-ad-fs#cors-customization
• https://web.archive.org/web/20221207192258/https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/development/native-client-with-ad-fs

To do that, the ADFS 2019 level functionality may need to be enabled: Invoke-AdfsFarmBehaviorLevelRaise.

@butonic copied from your chat

[mmattel]

ADFS: allow skipping userinfo call