One AD FS instance for multiple Active Directory forests without an AD trust