We are working on deploying ADFS for SSO with o365.
We have a consulting firm that handles our firewall configuration.
Today, while attempting to get them to set up a DMZ for me to install my ADFS proxy server, the consultent attempted to convinve me to just have them open up port 443 directly to the ADFS server, and to not use a proxy at all. He told me that such a configuration was standard practice now.
Because of the nature of our business, we have very stringent security requirements, including that no internal servers be opened up to the outside.
The question I have is, was he just blowing smoke because he was lazy and diddnt want to configure the DMZ, or does he have a legitimate point?