The expected domain (from auth endpoint host)
The actual web_auth_domain value found in the operation