Cloud Trust and AD prerequisites

We have hybrid environment and I am planning to use password less authentication.  All our domain controllers are on OS 2019, however, the forest/domain functional level is 2012R2.  I am not clear on...