I've been looking on enabling single sign on for clients who have an on-premise W2012 AD and an O365 subscription for their email.
if I understand correctly, with Azure AD Connect, you need one box with AD Federation Services role and one box with Web Application Proxy. Is there no way to put both on one single box ? Win Essentials seem to make it happen quite fine.
Perhaps I'm using the wrong tool ?