We had an issue recently on one client project, where the callback responses from azure started to have a massive query strings; so much so that they where over the default query string limit and caused SSO login failures.
Upping the max query string size in Web.Config fixed the issue for us, though I have no idea why the response query strings from Azure became so large.
Note: we are not using the Azure SSO package on this project, other projects where we do use that package have not encountered this issue.
Maybe you’re facing something similar?