When obtaining access and id tokens from azure active directory (via nextauth), the access token comes in two different format: the standard jwt format and some other format. I have noticed that for users within my tenant, the access token is in the standard jwt format but for users that are outside my tenant, the token format is different. Both tokens work however.
The id token however seems to be the standard jwt token in every case.
Why do the tokens differ?