Not as painful as I feared. The only problem we encountered was when creating endpoints for some of our VMs. They were all running with self-signed certificates and Front Door wasn't happy about that.