Azure AD Privileged Identity Management from ravitejafe's blog

Many organizations rely on SaaS applications such as Office 365, Box, and Salesforce to help boost staff productivity. Historically, the IT department needed to create and update user accounts in each SaaS application individually, and employees had to remember a different password for each SaaS application. The alternative is for users to create their own, potentially insecure credentials for each service. The more identities they have, the more likely they are to forget or lose one of them, creating a potential security risk.

By providing users with the convenience of single sign-on across all types of applications, you can help reduce the risks and headaches associated with having multiple identities. Azure AD extends on-premises AD into the cloud, enabling your staff to use their primary organizational account to sign in to their domain-joined devices and to company resources, as well as to all the web and SaaS applications they use to do their jobs. Application access can be automatically provisioned or de-provisioned based on group membership and employee status. Plus, Azure AD integrates out of the box with many of today’s popular SaaS applications.

More info: Managed IoT Services