was wondering if anyone has any practical experience with enabling SSO via AADConnect and the new pass-through authentication - https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-pass-through-authentication ?
Specifically, was wondering if the forest/domain functional level needs to be at Server 2012? The pre-reqs say Server 2012 required to run AAD Connect, but not why.
We have hybrid Azure infrastructure at the moment, so throwing in a 2012 server to run AAD Connect is easy, but upgrading all the DC's in order to increase the forest functional level is going to take some doing, and i would really preder not to have to create an ADFS cluster...
regards, Justin