I was able to connect using a service principal, Authentication=ActiveDirectoryServicePrincipal
Authentication=ActiveDirectoryServicePrincipal