Does Windows Server Active Directory Support single sign-on for web-based saas Applications?
Solution 1:
This is possible for Windows 10 clients with Azure AD join which are also joined to a domain. In this case the client has SSO to all resources that are trusted by the on-prem DC, and also to the resources trusted by Azure AD.
For older clients, it depends. If you have ADFS, you will get full SSO for all on-prem and cloud resources. If you don't, you will have to log in to AD and then to AAD.