How they even id the user for the cap? Some kind of system signature? Requirement of a MS account?