I remember when the internet was invented, and this whole hyperlink thing was being worked out. I'm sure the idea was that you put a thing on a page that you clicked on to go somewhere else. That link was identified as such by a visual hint - underlined blue text seemed like a good idea at the time, but as HTML developed all sorts of funky graphic design options became possible, and the internet became a beautiful place to wander round.

How, then, in the name of all that's holy has it taken me 10 minute to find the app password link - https://account.activedirectory.windowsazure.com/AppPasswords.aspx.

Because it's on a page which is laid out as tabs, but the two tab hyplinks aren't bordered in any way. The text is the same colour as all the other text on the page, other than being 80% grey. Oh, hang on, there are conventionally typographically formatted underline blue hyperlinks on the page, so, there won't be any other hyperlinks on the page that aren't blue underline, would there, because that would be neither sensible nor logical GUX design. You're an industry leader in a mature field, you really should be able to do better than this. The facts that you've got machines in every office in the world, and your only serious competitor screws up on just as regular a basis as you, are not excuses for User Interface Design 101 failures that I wouldn't let my 13 year old get away with.

Cmd U should get you to underline, I'm sure there's a night school nearby that can tell you how to change the text colour...

Consider the existing logout functionality for users who want to use the same app with another account they own (e.g. Outlook, Power Apps...): (1) You have to click "Sign out" (tooltip says you will be redirected to login afterwards which is not true), (2) You get an account picker screen that looks exactly like the login account picker apart from one line which makes one think it is an account switcher screen. (3) You get a logged out message and you even have to close the window. When compared to how one can switch between Gmail accounts I think we need a fluent account switcher / toggle.

In education specifically, students in earlier grades can have difficulty with entering their full UPN.

In our case, we have our primary domain - school.org for all staff and a student subdomain - students.school.org. If we were able to specify a default authentication domain like students.school.org within our company branding settings, this would allow students to sign in with the first half of the UPN only.

We struggle with student logins to federated applications purely because of the domain portion of the UPN. Also, coming from using ADFS in the past, students never had to enter their full UPN in that scenario.

These login issues disrupt classes and take away from teaching time in order to resolve the problems for the students.

We normally practice tagging custom key/value pair to most of the resources. Following the same procedure while working with App registered under AzureAD we noticed that there is no direct way of creating tags for the same. The only way at this moment for adding tags to app registered under AzureAD is going to the manifest page for the respective item and manually adding tags to it.
The tags key which is available in manifest only allows an array of strings rather than key/value pairs.

As a feature request -
1. Please allow key/value pair to be added as tag for app registered under AzureAD
2. Display the list of tags associated to app registered on the overview page for each app.