I thought it had to do with Azure AD, SSO, UPN mismatches, Azure AD Registration, but mostly ruled it out (I have limited ability to troubleshoot the specific environment in question).