iOS broker communication encrypts the tokens using a symmetric algorithm. MSAL first sends the key to the broker and the broker returns an encrypted response. It is recommended to use the same key irrespective of application - the main reasons is: fewer calls from broker to AAD, because broker tokens are scoped to the key (i.e. new key -> broker cache is not hit)