Microsoft claims that the architecture of this Azure AD Application Proxy service is such that users outside an organization's firewall never directly access the organization's network, unlike a ...