Entra ID OpenID SSO documentation is not up to date and missing some scenarios

I'm trying to configure SSO with Entra ID and tries to follow the documentation at https://github.com/Esri/idp/blob/main/Documentation/OpenID/Azure%20Entra%20ID.md

I have ArcGIS Enterprise 11.3 and the UI in Security Settings do not match the documentation.

I have specifically two areas I would like to be covered.

1. Using Public key / Private key instead of Client secret. Is that supported with Entra ID and if so, how do I configure it?
2. I check "Enable OpenID Connect login based group membership" in my version. But the current documentation is based on older version and do not have that option. In Entra ID I have configured the Group Claim to only add "Groups assigned to the application...". But how do I configure the mapping between the Entra ID groups and Groups/Roles in ArcGIS Enterprise?

Any pointers to help me get clarity on the above topics would help!