protected static final String AZUREAD_REPLY_URL = "aad.reply.url";

    /** Session attribute key for storing Azure AD states. */
    protected static final String STATES = "aadStates";

    /** OAuth2 state parameter name. */
    protected static final String STATE = "state";

    /** OAuth2 error parameter name. */
    protected static final String ERROR = "error";