https://docs.microsoft.com/azure/active-directory/hybrid/choose-ad-authn#decision-tree