Azure AD Application Proxy provides a simple, secure, and cost-effective way for remote access to on-premises websites and web-based applications. This video starts with an overview of how App Proxy works and then provides a tutorial on configuring the service with basic Azure AD authentication.
Links
For Server 2019, disable HTTP2 support for Kerberos Constrained Delegation https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application?WT.mc_id=AZ-MVP-5004159#windows-server