MicrosoftStephan- š this is debatable where to cache? :), i think this functionality is by Microsoft could do cache itself as well let the first call take time and second time this functionality could cache response. and also this functionality needs a timeout route feature, what to do if times out, not to just show "some AD error : AADSTS1100001: Non-retryable error has occurred" to the back to the app , but by default could be default claim minted to the app. what i believe AzureAD auth team dont want to wait for external apis part of auth (SLA) process, as their SLA for authentication would fail leaving this feature developer to cope up with 2 seconds timeouts made as requirements.
