This reference architecture implements a secure hybrid network that extends your on-premises network to Azure and uses Active Directory Federation Services (AD FS) to perform federated authentication and authorization for components running in Azure.
https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/identity/adfs
