I think this is sarcasm.

But genuinely AzureAD is really good. Authentication and Authorization systems are difficult, AD has always been begrudgingly the most well rounded (yes, it has warts) but AzureAD really is nice.

I especially like that my local admin can delegate Enterprise Apps to me so I can create SAML/OAUTH2 SSO links between stuff we use without needing the keys to the kingdom.

I recently set up Enterprise Federation with GCP and it took less than a day. (compared with many months in my last company which used on-prem AD)