https://configmgrblog.com/2020/01/14/office-365-portal-and-more-now-controllable-by-azure-ad-condition-access/