title: Azure AD token subject type (user or app-only?)
body: <p>Is there any way to tell whether the incoming token has been issued for a user or application principal just from the token? The only difference I could find was looking for <code>upn</code> and <code>mail</code> claims (because of B2B users) and then if those are missing marking the token as application only. Is there any better way to tell just from the token?</p>