Symptoms
You log in the Protection Console as a customer group company administrator and attempt to add a Microsoft 365 organization as described in the User Guide.
This leads to a download prompt for the local agent for Microsoft 365 instead of redirecting to the Microsoft 365 login page.
Troubleshooting
The behavior is expected if the tenant has "Enhanced security" enabled.