Standard hybrid enterprise
Many organizations can use the standard enterprise deployment pattern with a single or multi-forest Active Directory Domain Services (AD DS) instantiation connected with Azure AD. In this pattern, Azure AD enables and controls all user access to business cloud applications such as Office 365, Microsoft Intune, Salesforce.com, and other company applications. This same pattern enables user access to existing applications on the corporate network. This hybrid access is enabled for mobile access from iOS, Android, and Windows devices.
More you can read in this Microsoft Azure Active Directory Solutions Architecture White Paper