Include a screen shot/step for the Azure "Signing Option" drop down menu.
One of the drop-down menus in Azure that tripped up my organization was the "Signing Option" drop down menu in Azure. Three of our eight tenants accepted the default value of "Sign SAML response" and we were able to setup, test, and migrate them successfully. Our other five tenants just would NOT accept the azure connetion, and with a message that the username/password was incorrect, until we tried changing the Azure "Signing Option" on the azure (not the workday) side from "Sign SAML response" to "Sign SAML response and assertion" and BOOM it started working. We went back and changed the setting for the older three tenants, and discovered they functioned with either option in the Azure drop down. Therefore, I suggest a screen shot/step is added to this documentation (https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/workday-tutorial) to direct everyone trying this out to select "Sign SAML response and assertion" in Azure.