Yesterday I followed Vittorio Bertocci's tutorial "WS-Federation in Microsoft OWIN Components – a quick start" to set up a test application using Azure AD authentication. This is my first use of Azure AD (I work alone so don't use AD, period). I have just one Azure AD tenant containing one app.
I created a test user in the tenant, email@example.com, and could log into the app just fine:
Then I tried creating a new user, firstname.lastname@example.org who is a user with an existing Microsoft account (the email address is used to log in and manage the Azure Portal so it works elsewhere). The appropriate setting was selected to create this account -> User with an existing Microsoft account
But, I cannot log into the application as this user:
Can anyone explain why this is?
If I delete the user from the tenant, then re-create using the option
New user in your organsation then the user
can log in okay (although they get prompted to change their password).
I don't understand what the difference is, especially when the account works fine elsewhere.