Configuring support for Microsoft SharePoint Online and Microsoft OneDrive for Business
Microsoft SharePoint Online locations can be added as repositories in the Docs service just like an on-premise Microsoft SharePoint site to support both admin-defined and user-defined data sources. This is also true for Microsoft OneDrive for Business (ODfB).
Microsoft SharePoint Online furnishes two different ways for on-premises Microsoft Active Directory users to authenticate and perform normal SharePoint operations. These include:
DirSync with Password Hash: Users and their passwords on Microsoft Active Directory are synchronized with Microsoft Office 365. Users are presented with a login page where they can enter their credentials to access Microsoft SharePoint Online.
Active Directory Federation Service (ADFS): ADFS serves as a Secure Token Service. Behind the scenes (in background), users are redirected to ADFS for authentication and are issued security tokens that are then used by Microsoft SharePoint Online to sign in. Microsoft SharePoint Online users do not need to enter credentials when accessing from the corporate network, which typically enables sign sign-on scenarios.
Both authentication mechanisms are supported by the Docs service and all preparations take place on the server side exclusively. No device changes are required. The only prerequisite is that Microsoft SharePoint Online is already deployed based on either of the authentication mechanisms—DirSync with Password Hash or ADFS.