MS Entra ID- / MultiFaktor- Support for UM 10.15

As a bank we need to comply to the DORA regulations and those require us to use "state of the art" (read: MFA) authentication. But currently this is not possible with UM. Ideally all UM clients - but especially clients of the admin api - must be able to use MFA. And it must be possible to enforce MFA.

(adding the details also here, so everybody can see them)

For our specific case we would require those things for UM 10.15:

1) The "enterprise manager" - must implement a credential flow with Entra ID, so that human users can authenticate to Entra, retrieve a Token and pass that token to the admin api. The api has to accept a token instead of credentials for that.

2) A MFA Token Login module that can be configured and is able to verify the Entra Token

3) We would also need a change to the existing LDAP login module. Reason: For technical users we would continue to use a login with LDAP credentials. But the LDAP login module would have to check if the user has a configurable Group/Flag set in LDAP that allows that user to use LDAP for UM. All our personal users would not have that flag set and can therefore not use this way to login. They have to use Entra

4) The ideal implementation would enable all UM clients in the suite (e.g. IS, Optimize, MWS,...) to use the "client credential" flow with Entra ID to also use Entra instead of LDAP. But this is currently not in our focus. We would be ok with the mix of "technical users from those sytems can continue to use LDAP, but human users using for example Enterprise Manager have to use Entra ID"