APM as IdP for Office 365 with Exchange 2016 hybrid deployment

I have a scenario where the APM is acting as the IdP for Office 365. This was created via the iapp with DUO as second factor auth.

 

My questions are as follows: What options do I have to integrate Exchange 2016 hybrid deployment into the above scenario? Running the Exchange 2016 iapp will generate another APM policy, so I don't think that will work properly. How can I present Office 365 to users via a separate APM policy (via webtop)?

 

Cheers!