https://www.petervanderwoude.nl/post/conditional-access-and-registering-or-joining-devices-to-azure-ad/