https://www.configmgrblog.com/2018/10/25/session-controls-in-conditional-access-now-also-controlling-exchange-online/