I'm trying to use AZURE AD application proxy as authentication for external users. The application is hosted on prem data center. I would like to know if this can be achieved without changing anything for internal users. The application is a web application. This web application is already using on prem AD to authenticate internal users.