Authentication and authorization is handled by SharePoint / Office365.
edison365 does not control the standard used in the authentication process.
If you would like to understand more about how authentication and authorization work, please refer to the following documents from Microsoft: