How does application validate the authenticated token from Azure Active Directory?

Question

I have an application which is sitting behind WAF (Web Application Firewall).

Application is using Microsoft Active Directory for authentication.

Here are the