Most corporate systems enforce nowadays https, which is good. Unfortunately that means, that they replace redirect URLs to point to https too.
So the whole flow is broken, as the actual redirect call from the auth system that reaches the local system will never be read by the server started by auth2c.

I did not find any option to let the locally started server to react on https:// (needs self-signed certificates?)

Any chance to add this?