You need to configure AD FS to ensure that AD FS tokens contain information from the Active Directory domain
You need to ensure that users can access network resources only from computers that comply with the company policy
You need to ensure that Server1 can read the dial-in properties of the user accounts in the eu.contoso.com domain