Uh, turns out, there is even more to set up manually: the resource owner
password credentials flow, so the test-runner can create authentication tokens
for the user it is simulating. 😡
https://docs.microsoft.com/EN-US/azure/active-directory-b2c/configure-ropc?tabs=app-reg-ga