Azure Active Directory Connect (AAD Connect) and Azure Directory Federated Services (ADFS)
If you intend to integrate your on-premise active directory with O365, then proceed with this step. If you don’t need to integrate on-premise active directory, and intend to provision cloud-only identities, proceed to Sync your SIS with School Data Sync.
The most efficient path to Moving to Microsoft Education from on-Premise Active Directory is using AAD Connect with Password Sync and the Express Configuration. If you need to manage password authentication requests from your own on premise Active Directory, use the Passthrough Authentication Option with AAD Connect. Finally, if you need on-premise managed Multi-Factor Authentication (MFA), Active Directory Federated Services (ADFS) will be required.