• Azure Active Directory (AAD) – users, groups, SSO
  • Multi‑Factor Authentication (MFA)
  • Managed Identities – for services without credentials