Scenario - Customer has a DaaS deployment configured with AAD for auth, a single resource location and a single AD domain. They are migrating to a new domain and want to migrate the Citrix deployment along with it (both VDAs and user accounts) and there will be no trust between the old and new domains. The new domain has a new FQDN, but users will keep their UPN/email and SAMAccountName. AAD sync will be stopped on the old domain, and configured for the new domain on the cutover day. As you can't use AAD to auth to both domains at the same time, for testing until we cut over AAD I think the easiest way to do this would be create a new Workspace URL, then use Adaptive Auth to set the auth type to, say, AD + MFA?