We have almost gone completely cloud based, do we still need an onsite DC server?

[Norphy]

I would imagine that your web filter wouldn't be able to do single signon to identify the users.

 

Depends on the filter and SSO method. IIRC, Smoothwall can do authentication with Google.