I've been looking for an answer to this here and in other places, but I can't seem to find one.
I have a client with a single on-prem Active Directory domain. One forest, one domain. There are other on-prem servers which use it for authentication. Client software also uses AD for authentication.
I am setting them up with Office 365 for e-mail and other services, and I don't want them to have to manage their domain and Azure accounts separately. I'll be using Azure AD to keep them in sync.
The on-prem domain uses a subdomain of the company's public domain (i.e. ad.company.com) which is not in the public DNS record, and I want their e-mail addresses and Azure accounts to be [email protected]. Is there something special I need to do for this to work? Are there any pitfalls I need to be aware of?
Thanks!