
Explanation

Box 1: Pass-through Authentication with Azure AD Seamless SSO
Azure AD Seamless SSO versus Active Directory Federation Services
Companies with a security requirement to immediately enforce on-premises user account states, password policies, and sign-in hours might use Azure AD Pass-through Authentication.
You can combine Pass-through Authentication with the Seamless Single Sign-On feature.
Note: Azure AD supports the following authentication methods for hybrid identity solutions.
* Azure AD password hash synchronization
* Azure AD Pass-through Authentication
Box 2: Azure MFA
One key benefit with Azure AD Pass-through Authentication is that it works seamlessly with Azure MFA.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn