Modern authentication is supported in*environments where ADFS is accessible outside of the corporate network via a WAP (Web Application Proxy). This is a Microsoft best practice.

More...