Microsoft Graph /oidc/userinfo does not return the tid tenant id claim

The Microsoft Graph implementation of OIDC userinfo (https://graph.microsoft.com/oidc/userinfo) returns only sub, name, family_name, given_name, picture, email, it does not include tid. The tenant id lives in the id_token (parse the JWT) or can be fetched via GET https://graph.microsoft.com/v1.0/organization (value[0].id, requires at least User.Read). Treating /oidc/userinfo as a one-call source for tenant identity will silently produce tenant=None.

To obtain a Microsoft tenant id alongside identity, parse tid from the id_token; for tenant display name and verified domain, call /v1.0/organization separately rather than expecting them on /oidc/userinfo.