Jess, it appears to be a straight up bug. If you add Microsoft.IdentityModel.Protocols.OpenIdConnect and specifically add version 7.1.2, you'll still get the bad behavior. It's called out in the dependency section of Nuget Package Manager. And it says >=7.1.2. But that's a lie. Install >=8.whatever.