you need an A record to publish the SSO AD FS server address. Note that, in external DNS, this A record will typically point to the external address of the network load balancer for the AD FS Proxy Server array. On the internal DNS, it will point to
the AD FS server farm.