Trying to figure out how to deploy SSO into a web application for the following scenario.
Domain A (contoso.local): Syncing identities to Azure via adconnect and leveraging pass-through authentication for various applications.
Domain B (contoso.dom): Hosts web application that I want users from domain A to be able to SSO into. The web application is published using azure app proxy.
-Users have identities in both domains (ie testuser@contoso.local & testuser@contoso.dom)
-Web Application supports IWA
Looking for guidance around the identity portion specifically. IE How to tie in both identities into the sole AzureAD instance? What impact if any will this have on PSA in Domain A? Is a Domain Trust required at all?