Is calling AD legacy a good reason to move all SSO groups to the cloud?
Our hybrid setup creates and terminates accounts in on-premises Active Directory, then syncs them to Entra ID. SaaS access has usually been managed through AD security groups synced…