01
The page is real. The request may not be.
If you use Microsoft for work, watch for an invoice or document telling you to enter a code on Microsoft's website. Research published yesterday describes this scam.
The page can be real, but entering the code can approve somebody else's access to your account. Only enter a sign-in code when you started the login and recognize the app or device it's for. If you already followed a suspicious request, tell your workplace's IT support promptly so they can help secure your account.