adfs: instructions to use RO endpoint