Authenticates a user using a signed JWT token from a configured identity provider. The JWT must be signed with a key matching the configured JWT settings in Orchestrator. Token validation includes: issuer verification, audience verification, expiration check, and single-use enforcement. On success, creates an authenticated HTTP session. Requires pre-configured JWT settings in Orchestrator.