Can be even worse. Can be a redirection service that requires the corporate SSO. Or multiple layers of redirection due to multiple layers of corporate "security" tools. And I'm not making this up.