Your ForgeEPM address
Sign-in continues at Microsoft. ForgeMail does not ask for, see or store your password.
A page that is not Microsoft’s asking for a Microsoft password is exactly what a phishing page does, and it would step around multi-factor sign-in. ForgeMail sends you to Microsoft instead, so your password and second factor are only ever handled where they belong.