DRAG DROP
An organization has several web applications and uses Azure Active Directory (Azure AD). You are developing
a new web application that supports sign-on using the WS-Federation to Azure AD.
You need to describe the authentication process flow to your team.
In which order are the actions performed? To answer, move all actions from the list of actions to the answer
area and arrange them in the correct order.
Select and Place:
Answer: 
Explanation:
https://azure.microsoft.com/en-gb/documentation/articles/active-directory-authentication-scenarios/
1. When a user visits the application and needs to sign in, they are redirected via a sign-in request to the authentication endpoint in Azure AD.
2. The user signs in on the sign-in page.
3. If authentication is successful, Azure AD creates an authentication token and returns a sign-in response to the application’s Reply URL that was configured in the Azure Portal. For a production application, this Reply URL should be HTTPS. The returned token includes claims about the user and Azure AD that are required by the application to validate the token.
4. The application validates the token by using a public signing key and issuer information available at the federation metadata document for Azure AD. After the application validates the token, Azure AD starts a new session with the user. This session allows the user to access the application until it expires.
https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-authentication-scenarios