A practical guide to detecting PTA authentication events, inspecting authentication flows, and confirming on-premises password validation followed by Azure AD MFA.