yeah, forgot to mention. I'm looking into "workforce identity cloud", and apparently Microsoft's offer is very hard to pass, if an organisation uses/requires to use MS Office.
Microsoft Entra ID formally known as Azure Active Directory is popular option. But the list goes on Ping Identity, One Login, Google Workspaces, and more are all options out there.