This gig requires significant customer involvement and is not a "turn key" solution.
1) Requirements gather: need information about your AD Forest and Office 365 tenant 2) Remediation: find problem issues and provide course of action (remediation is customer responsibility) 3) Install Azure AD Connect with "Express Settings" (customer must provide dedicated domain-joined Windows Server 2012 R2 Standard server (can be a VM) with 2 vCPU, 4GB RAM, and 120GB of storage) 4) ADFS (Standard package): install ADFS and integrate into Office 365 (there are pros and cons of implementing ADFS, including significant infrastructure - do not select Standard package if you cannot provide 4 add'l servers, two internal domain-joined, and two in a DMZ, with load balancing capabilities available). 5) Multi-Factor Authentication (Premium package): Requires Azure AD Premium licensing for implementation w/o ADFS; implementation w/ ADFS can include Azure AD Premium or other supported MFA platform)
Other information: Requires valid licensing for Office 365 and any OS and User licensing for on-premise systems. ADFS implementation requires a trusted 3rd party certificate (Self-signed certificate will not work).