The method documentation here I think needs to be updated. It doesn't get the signed token, it performs the logon.