The last way for creating hybrid applications is by joining an Azure VM to an on-premises domain. You can connect an Azure Virtual Machine, which has your application deployed in it for instance, with an on-premises domain using Azure AD Domain Services. To set up this connection, you don't have to install and manage a domain controller in Azure.
Azure AD Domain Services is a feature which can be enabled inside your Azure subscription. It creates a managed domain which is fully integrated with the Azure AD tenant and available inside Azure VNets. On-premises VMs and Azure VMs can then join this managed domain and use the usernames, passwords, and group memberships from Azure AD to log in or authenticate. Applications that are deployed inside these VMs can benefit from this as well.
Azure AD Domain Services provides group policies, LDAP and Kerberos...
