I have an application with database authentication using OWIN and Identity. One customer requested single sign on with ADFS on premisse. I did it directly through OWIN, but the client requests a federation url (with metadata), which I do not own. To get around, I think of authenticating with Azure AD with the least possible effort (I thought I'd use the ldap library and just check if the user exists) and Azure AD configure SSO.
Is this scenario valid?