When using the passport-local Strategy, we display errors to the users this way:
return cb(null, false, { message: 'Incorrect login'});
passport-azure-ad OIDCStrategy however does not accept such a payload in the third argument of the callback function.
I wanted to flash an error message when an ADFS user is disabled (they are enabled by default, so it is a very rare case).