https://blogs.technet.microsoft.com/ausoemteam/2017/04/03/aad-application-proxy-in-the-azure-portal/?utm_content=buffereac52