Ok now do the cost for moving all other applications from Entra/Active Directory SSO running on Windows to LDAP or some non MS Oauth implementation on Linux. I

Ok now do the cost for moving all other applications from Entra/Active Directory SSO running on Windows to LDAP or some non MS Oauth implementation on Linux. I'm sure replacing all the legacy applications and retraining the government employees on their FOSS alternatives can be done but it's going to take years and burn many many millions in fees for IT suppliers and investigating alternatives. You really need to do it because of ideological considerations because i doubt you'll save a dime the first decade.