With the WordPress + Office 365 plugin you can basically two supported authentication scenarios:
Using these scenarios, you can now decided whether authentication (for Office 365 / Azure AD users) is required for all users that are readers of your posts and pages (= intranet) or only for authors who access the WordPress backend e.g. the authors and editors of those posts and pages (= internet).
Obviously, in an intranet scenario – which is the default scenario – you would want all users to have authenticated successfully with your Office 365 tenant’s Azure Active Directory, as most content is likely to be at least classified for internal use only.
However, to accomodate for scenarios where such authentication would not be required and you only want the authors to use the Azure Active Directory integration you should select the internet scenario.
For further technical details please refer to the Configuration documentation
View a chart that compares all features available with all editions.