Swhats the idp configuration in your zitadel instance. specifically the choosen tenant type?
Slogin.live.com is the domain for private m365 accounts or xbox live (or minecraft 
). This points to a misconfiguration of the tenant type in the zitadel config
). This points to a misconfiguration of the tenant type in the zitadel configSthats fair. and the customer has setup their azure app / service account according to the idp guide?
https://zitadel.com/docs/guides/integrate/identity-providers/azure-ad-oidc
https://zitadel.com/docs/guides/integrate/identity-providers/azure-ad-oidc
Saaah yes
Ssorry i thought its a general problemo. this points to a user cache issue then. microsoft is really bad in keeping their accounts separate. e.g. if they are using the same browser with a company account and a private account funny things may happen
Sask them to try login into the service using a private windows or try to signout of their current account here:
https://go.microsoft.com/fwlink/?linkid=2300942
https://go.microsoft.com/fwlink/?linkid=2300942
Soooodd. is their email address maybe linked to an education account?
S(i am just guessing atm 
)
)Sit would be interesting to see what the users browser reports back (using the web developer tools network tab)
additionally, it could be interesting to see if the login works for them on a different device
additionally, it could be interesting to see if the login works for them on a different device
Ssounds about right 
Sgreat to hear that you could resolve the issue