https://blog.sonnes.cloud/entra-id-global-secure-access-client-part-1/