Configure the Office 365 Single Sign-on summary

O365:

If the O365 account has been tested before, disable synchronization and force the deletion of existing users
Related to command: remove-msoluser-userprincipalname [email protected] (-removefromrecyclebin)

AD:

Build a DC to create a separate OU and user for testing purposes
Add your own domain name, such as vobie.cn, to your ad domain and trust relationships, and modify the format of the user's UPN as your own domain name
Build a CA, configure certification authority, certification authority Web enrollment, and then request a PFX certificate for ADFS

ADFS:

Installing the O365 login Assistant and the AAD module
Import a PFX certificate in the console
Installing the ADFS role, configuring ADFS
Activating AD synchronization on O365
Installing Aadconnect
Start-adsyncsynccycle-policytype Initial can manually sync local users to O365

Configure the Office 365 Single Sign-on summary