https://www.peterdaalmans.nl/2016/06/22/conditional-access-for-owa-and-sharepoint-web-access-arrive-to-intune/