Thank you for the great example.
After replacing PRIVATE_PROXY_SERVER with https://login.microsoftonline.com/{tenetId}/v2.0/.well-known/openid-configuration
I do get id_token successfully, however, console.info('at', this.oauthService.getAccessToken()) gives empty string.
Could you test with your AAD and see what happens?