The #UserAuthenticationMethod field of the Microsoft 365 sign-in logs contains numeric values (16, 272, 33554432...) that were not documented anywhere. I figured out that it's a bitfield, and recovered the meaning of most of the bits!