By downloading a shared key over TLS rather than the provider's public key?
No difference from the perspective of the token consumer. From the perspective of they token generator, it means rotating per-tenant keys rather than a single keypair.
No difference from the perspective of the token consumer. From the perspective of they token generator, it means rotating per-tenant keys rather than a single keypair.
Additionally, your TLS terminating stack is much better hardened than median in-app crypto code.