One of the most confusing things for people (especially in the Small to Medium Business [SMB]) market are the identity options that are available in Office 365. The above graphic and accompanying blog post:
http://blogs.technet.com/b/lystavlen/archive/2012/02/09/knock-knock.aspx
explain it pretty well I think.