If you use the UserPrincipalName parameter, you needn't use the AzureADAuthorizationEndpointUri parameter for MFA or federated people in environments that Generally require it (UserPrincipalName or AzureADAuthorizationEndpointUri is necessary; OK to make use of equally). In Outlook, opening a