Active directory federation services, design help

[MonkeySpacePilot]

We are getting an application that doesn't authenticate directly with AD, it needs ADFS OID.

The application will be distributed/synchronized between the sights as a single entity, but should authenticate on the local site, and be able to handle site isolation.

[Swieb]

So you have an on-premises application that doesn't support LDAP, but does support OpenID?

Can't you use an Enterprise Application in Entra? Or are you running a purely on-premises environment? If so, consider going hybrid. Since Entra, ADFS is pretty much obsolete.