I am using the WS-Federation plugin with Identity Server 4. I have an app registration in Azure AD. The Identity Server then connects this app in Azure AD for authenticating