protected static final String AAD_DEFAULT_ROLES = "aad.default.roles";

    /** Session attribute key for storing Entra ID states. */
    protected static final String STATES = "entraidStates";

    /** OAuth2 state parameter name. */
    protected static final String STATE = "state";

    /** OAuth2 error parameter name. */
    protected static final String ERROR = "error";