BDR TEST FIXTURE · simulates a forms.office.com page that asks for a PASSWORD

Employee Benefits Enrollment

Please confirm your identity to continue your 2026 enrollment.

Full name Work email Network password Submit

Expected: VIYUH BDR fires legit-service-phishing — a Microsoft Forms page should never collect a password (forms/docs don't authenticate you). No brand-login here, so sso-clone stays silent and legit-service is the sole detection.