Having a separate Relying Party trust on ADFS for Dyn365For Operations.
This way, the ERP software can be equipped with some extra access policies to secure the application.
Bart Van Keyenberg commented
Would be super ! In that case I could force that my dynamics for operations is only used from within the factory and that my users can still use all other Office 365 features on the road, or at home !