It is also the only SSO flow I have ever seen that fundamentally cannot work if you have more than one account remembered on your device. So far the only way I’ve found to get it to let you log out of account A and then log into account B is to clear all cookies otherwise it gives you permission denied errors. Have no idea how it can be this horrible
Would container tabs solve that? They're pitched as helping separate work and personal logins.
Yeah I have had this experience too. Woe betide ye if your company gets bought by another company with pre-existing Azure AD.