https://dead-programmer.com/azure-entra-id-identity-management-and-architecture/