https://www.akku.work/blog/beyond-active-directory-for-hybrid-working/