Same here. We had a very fragmented landscape (multiple idp tools, some tools using internal users,...). We consolidated everything to entra (450 apps and count

Same here. We had a very fragmented landscape (multiple idp tools, some tools using internal users,...). We consolidated everything to entra (450 apps and counting) and everybody couldn't be happier. Full sso on everything + scim where available. We do offcourse have conditional access + PIM for admins but that is to be expected. You just need a good strategy on how you are going to tackle IAM and then just stick to it.