If you want to see a real mess: * Create a consumer MSA based on a Gmail account * Invite that MSA into an AzureAD directory * Try to sign in as that user to

If you want to see a real mess: * Create a consumer MSA based on a Gmail account * Invite that MSA into an AzureAD directory * Try to sign in as that user to that directory. Good luck!