@Zakhu @WindowsAzure If you have #Office365 instance and not doing dirsynch you are using #WindowsAzureAd already. No on-premises required