I'm the sole IT admin for a small org. I'm eager to improve our security with MFA by setting up AD FS, and for lots of reasons I was hoping to do that in the cloud. There is a helpful tutorial in Microsoft's docs (https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-fed-azure-adfs). But that setup requires six VMs: two DCs, two WAPs, and two LBs.
Is all that really necessary? It would be pretty expensive for our org just to gain additional authentication security and flexibility. I know we would gain other things, too, like federated domain join and stuff, but I'm wondering if, in practice, there is a smaller-scale solution that provides reasonable reliability for a small org without extreme uptime demands.