Active Directory Administration Cookbook

There's more...

Resetting the Relying Party Trust using Azure AD Connect after onboarding an existing AD FS farm is recommended, as the Convert-MSOLDomainToFederated PowerShell cmdlet in the MSOnline PowerShell module merely adds a handful of claims rules in AD FS for the "Office 365 Identity Platform" relying party trust. Using Azure AD Connect Reset Azure AD trust unlocks the full range of functionality, while providing a roll-back scenario through its backup.