https://mikevandenbrandt.nl/azure-ad/start-migrating-mfa-and-sspr-to-the-new-authentication-methods-policy/