title: Is it possible to prevent automatic sign-on through Azure Active Directory
body: <p>We're working on a SAAS application that has recently been configured to use Azure ADAL for authentication. If it matters, we're going the oauth2 route, with response_type: code.</p>
  
  <p>However, when we're testing the application, if the browser has been signed into an Azure account that does not belong to the tenant acting as identity provider, the prompt for password is bypassed, and the login fails on the Azure screen, saying AADSTS50020  - user not found in tenant.</p>
  
  <p>On the one hand, congratulations to Azure for finding an already signed in user! On the other hand, there is no recourse to elect to not use this signed in user; it does not give the user the chance to interject with credentials that work.</p>
  
  <p>How can we prevent this?</p>
  
  <p>The core issue is we don't want users, visiting our site and ready to sign in, to have to have already signed out of Azure before trying to log in with our site.</p>
  
  <p>Thanks in advance.</p>