New Contributor

I have an on-premise domain which needs to remain that way for security reasons.  I am trying to propose a pilot for some of the users in that domain, and these users will have very limited internet access.  I want to keep the domain on-prem and don't want to synchronize it with O365, so wondered what the best approach for this would be?  For instance, could I use ADFS or something similar to provide the on-prem users access to an O365 domain which could be used to host the Teams application?