1. Enable SSO via OIDC for Azure AD.
  2. Enable automatic user provisioning and de-provisioning for Azure AD via the SCIM protocol (similar to Okta and Onelogin)