https://macmule.com/2016/01/04/box-active-directory-federation-services/