https://marcmylemans.github.io/posts/EntraID_Cloud_Sync_SSO/