If you do not receive the PRT tokens on the AzureAD registered device where Access Manager is configured for WSTRUST, check if the token type is SAML.
To troubleshoot this issue, perform the following:
On the Home page, click Applications > Select a Cluster > [application name] > WS-Trust > Service Provider Domain.
Click the name of the service provider.
Select Service Provider tab.
Click the name of the service provider.
Specify the following details:
Token Type: Select the type of token as SAML that the service provider will accept or validate.