https://www.petervanderwoude.nl/post/how-to-configure-a-relying-party-trust-between-on-premises-ad-fs-and-microsoft-azure-ad-for-single-sign-on-in-microsoft-intune/