We want to allow a client to use their Azure AD credentials to log into our web application. We currently have an on-premise infrastructure running a .NET Core application s