SAP SS0 2.0 Strategy

Hi All,

I would like to post this question and get opinion.

Scenario: SAP systems are running at on-premises datacenter and SAP SS0 2.0 facilitates single sign on to ABAP and Java systems.

We are now setting up a greenfield SAP landscape in Microsoft Azure which would have SAP products like S/4, BW, Gateway etc.

The question is: Can we use the existing SSO at on-premises for connecting to Azure landscape as well or can we move SSO to Azure or setup a new SSO in Azure. As of today we have 3500 users using on-premises SAP systems and aiming at 6000 users accessing SAP system in Azure in 3 years time with utilizing wider SSO features(Fiori, etc).

Is there a strategical best practice .

how is SSO license calculated. Guess it is calculated for number of users but if a company uses two domains then can we use the same SSO license for running Netweaver SSO on two different domains(Azure and On-Premises).

Regards

SAP Basis