https://d365hub.com/Posts/Details/a971871a-aac5-45da-ad05-fbad14e9b24d/prevent-aitm-with-microsoft-entra-global-secure-access-and-conditional-access