Plone authentication against AzureAD/Office365 through OpenID?

Quick check: pas.plugins.authomatic seems to work in general on Plone 5.2 / Python 3. I tested it against Github...there is some issue that the user is not directly authenticated upon the first login action...needed to perform login twice.