Here are the different events generated on a Windows Server 2016 ADFS server when a device successfully authenticates internally during the Azure AD registration phase in a federated environment (using the windowstransport endpoint)
All GUID are given as examples. Colors are to facilitate the correlation.
