Nah if you run Azure / ADFS you can respond via DNS differently. External points to plublic endpoint while internal points to internal ADFS.
Think Internal Auths to 10.xx
While External Auth: azure.microsoft.com (or whatever)
If you’ve logged in to the workstation with you azure credentials (via ADFS) then it is smart enough to know you are.
That’s where this little magic happens
Click Login and it just knows who I am.