Couple of simple (I hope) questions:
is it possible to authenticate users through on-premise ADFS server in Azure without actually importing users to the Azu