Create a new Azure AD tenant namedfabrikam.com

From the Fabrikam forest, configure an additional UPN suffix ofLitware.com.

From the Fabrikam forest, configure all users to have a UPN suffixofLitware.com.

From theLitware.comtenant, add a custom domain named fabrikam com.

Create an outgoing security rule for port 443 from the Internet. Associatethe NSG to all the subnets.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the webservers.

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

federated single-on (SSO) and Active Directory Federation Services (AD FS)

password hash synchronization andsingle sign-on (SSO)

cloud-only user accounts

Pass-through Authentication and single sign-on (SSO)