[majke]

> if you want to allow offline login, you need to keep the hash/token to the Microsoft Account locally,

I'm not following. I thought the whole issue is that users _do not_ want to use microsoft account locally and that microsoft fights that.