Out of my depth here, suspect they tell you to have ADFS which supports claims based authentication. I don’t know enough about how exactly the Nextcloud integration works and what tokens it exchanges, hope someone else can comment on that.
Is the Microsoft Online Server license single? That is, do I get the license and install it and can I use it for as many users as I want on my nextcloud?