Here's a really fun edge case: My federated (AAD) login for msft work things (Azure portal, O365, some VSTS) is <username>@<company>.com. My non-federated log

Here's a really fun edge case: My federated (AAD) login for msft work things (Azure portal, O365, some VSTS) is <username>@<company>.com. My non-federated login for other msft work things (down to a couple old VSTS accounts that aren't migrated yet) is <first.last>@<company>.com. So when I enter my username for non-federated things, it has to ask me whether to forward to AAD or prompt for a password. Because my login ID looks like it should be federated, but doesn't actually exist in their upstream.