For security IOS 11+ no longer shares cookies between applications. Each app gets its own sandboxed cookies jar. For SSO the azure login sets a cookie. But due to the sandbox the app webview when it navigates to the azure login, it does not have access to a cookie set by safari for this site.
note: I assume at some point Android will follow suite.