On: “Invalid Username or Password”: a useless security...

[kozziollek]

If username is an e-mail then an app probably checks if e-mail domain has configured single sign on (SSO) and, if it has, it redirect you to your company authentication server instead of asking for password.

[gumby → kozziollek]

thanks