[okreallywtf]

Looking into active directory based features in Azure (key vault, etc) convinces me that somehow active directory is to blame for a lot of the confusing account issues around Azure. I get the feeling a lot of the microsoft authentication systems are built on top of active directory, which does not seem like the most straightforward auth system out there.