Right now we have office365 with SSO (we use dirsync). In order to ensure that people can access email, even if our campus is down, we created an Azure virtual network with a single virtual machine that runs as a domain controller and runs ADFS. Everything works fairly well, but we are having issues keeping the site-to-site vpn up, which makes replication to our campus domain controllers an issue (particularly during password reset time).
I just saw that there is a new azure AD service and some stuff about office 365 SSO. Would I be able to get rid of my vm and virtual network (and vpn) and just use the new AD service? How will it sync to my on premise domain controllers? How do I connect it to office365 for SSO?
if someone could point me in the right direction, that would be great. I just want an easy, reliable SSO that is not affected when our campus goes offline.
thanks!