Capture the HTTP redirect chain. A passive Vortex will return a 404 Not Found or 400 Bad Request when it sees wa=wsignin1.0 . An enabled Vortex will begin the authentication dance.
: It is a registered application in Microsoft Entra ID often used for Single Sign-On (SSO) : The "[wsfed enabled]" tag indicates it uses the WS-Federation Vortex Wsfed Enabled