If you do not receive the PRT tokens on the AzureAD registered device where Access Manager is configured for WSTRUST, check if the token type is SAML1.
To troubleshoot this issue, perform the following:
Click Devices > Identity Servers > Edit > WS-Trust > Service Provider Domain.
Click the name of the service provider.
Select Service Provider tab.
Click the name of the service provider.
Specify the following details:
Token Type: Select the type of token as SAML1 that the service provider will accept or validate.
NOTE:If you change the Token Type to SAML1, you will receive the PRT token.