[Freeipa-users] Support for Azure AD authentication with on-prem AD forest-trust identities