I have read through lots of articles on Office 365 and Azure AD, but I am confused. This is my issue: There are several schools with individual Office 365 subscriptions (multi-tenant) and their users (teachers and students) sign into an MVC application (standalone app) to access their mails, calendar and other school related features.

I have to create single sign on for all these users from their Office 365 accounts using Azure AD and synchronize Office 365 mailbox, calendar and other apps with this application.

What path do I need to take to establish single sign on (ADFS or password only or something else with AD Connect) and can this be done with single Azure AD tenant? And also how to synchronize Office apps?