In the meanwhile found the issue.
Any firewall setting between moodle server and Azure AD should ensure any "ESTABLISHED" connexion sockets pass through the firewall.
Any firewall setting between moodle server and Azure AD should ensure any "ESTABLISHED" connexion sockets pass through the firewall.