As I attempt to set this up, the first thing that I notice is that the Office 365 documentation says this:
"Single sign-on requires Active Directory synchronization."
But the AD Synchronization documentation says this:
"We recommend that you set up single sign-on before you set up directory synchronization."
Something is obviously very wrong.