Most people on here dislike Azure because they don't buy into the Microsoft ecosystem, which is absolutely understandable, but if you do buy into the ecosystem,

Most people on here dislike Azure because they don't buy into the Microsoft ecosystem, which is absolutely understandable, but if you do buy into the ecosystem, Azures really pretty great. AAD ties everything together (this is a pro or a con depending on whether you use it), meaning you get secure SSO (including biometric security) for everything from device provisioning to machine identity (through service principals), and then Microsoft 365 E3 and E5 licenses offer every internal business tool you'll probably ever need in one place. Azure basically only works if you go all in.