# 6: AOS requests the Alfresco scope itself (403 with scope=...api://<CLIENT-ID>/access_as_user...)
curl -s -o /dev/null -D - -X OPTIONS https://<host>/alfresco/aos/ | grep -i forms_based_auth_required
# 5: metadata copy contains the Alfresco scope (run on the nginx server)
curl -s http://127.0.0.1:18099/entra/v2.0/.well-known/openid-configuration | grep access_as_user
# 7: OPTIONS / reaches Alfresco (403 with MicrosoftSharePointTeamServices), browsers go to /share/
curl -s -o /dev/null -D - -X OPTIONS https://<host>/ | grep -i sharepoint
curl -s -o /dev/null -D - https://<host>/ | grep -iE '^HTTP|^location'
# 7: sessions in the proxy (run on the nginx server): [] until Office signs in
curl -s http://127.0.0.1:8098/_aos_admin/list
