https://techlab.blog/enable-password-less-authentication-for-azure-ad-webapps/