ASFS 2016 Chronograf Authentication - Has anyone ever got this to work?

We’ve been trying for months to get Chronograf to authenticate with our ADFS 2016 SSO server. The documentation pages are, well, not very useful and possibly misleading. After trying numerous combinations of configuration values, we are still scratching our heads and beginning to look at alternatives. Anyone had any luck with this?