Is there a list of FQDNs for NSG Service tag?

I used Firewall and NSG in Azure to create a closed network.
However, some applications require Azure login using Service principal. 

NSG allowed Azure AD Service tags, but I wonder what FQDN should be allowed in the firewall.