CRM 2013 authenticating via ADFS when ADFS is in separate untrusted domain

I have the following scenario:

CRM 2013 installed in domain A

ADFS installed in domain B, where there is no trust between domains.

In theory is it possible to set up CRM IFD where the only ADSF server is in domain B, and all the end users of the system are in domain B.

But then how do I create deployment admin users in the local domain.

I have configured CRM 2013 Claims and IFD to use the ADFS in domain B , but need to add users into the CRM system. I cannot log on to the system because CRM keeps using ADFS to authenticate.

The documentation implies that if you are an internal user in domain A accessing crm via hostname/org name will use windows auth. But this is windows auth via ADFS ?

I don't want to create an ADFS server on domain A if I can help it !

thanks, John