I’ve been looking around trying to find a good description of the specifics of how single sign on works with an ADFS server.  This is the best I was able to figure out.