https://ketiadaan.com/primary-authentication-is-not-required-for-all-users-who-access-applications-that-use-ad-fs