I was thinking along the same lines. Could it be that all his Azure activities to date has happened under this federated account, and he no longer have the Azure access he is expecting (if in this case, he never signed up for Azure outside of his guest account at the school)