Note: this disables all the local STS (and therefore the local AD and any trusted AD) and relies on IdPs configured for ADFS.

IWA authentication stops working and users are prompted with IdP authentication irrespective of where they come from (intranet/internet).