PVS-Studio 7.26.74066.377 for windows download

Hi, welcome to Azure! Let's set a base understanding before I dive into your questions. can an admin user have an azure ad active account, but disabled m365 account? If MFA is enabled only at M365 account, does that mean, this admin user do not have mfa enabled to access Azure portal? Also can you have m365 account and mfa disabled, but also have Azure Ad account with MFA enabled? Is there a simple way to understand my friends explanation? My understanding is Azure AD are generally utilised for organisation wide MFA and Account disabling based on user activity and SSO capabilities, potentially having a On-prem AD as identity and account source of truth and Syncing it with Azure AD.

he is also saying due to azure AD restrictions on having only last 30 day login record, he is reviewing microsoft 365 accounts every 30days before disabling them.

but Azure AD accounts are kept active for them to access exchange mailboxes.

SSO is based on M365 accounts and any other apps with SSO are inaccessible if m365 accounts are disabled.if last login is more than 90 days, they disable Microsoft 365 accounts, which prevents access to Microsoft 365 services.

My friend at the place he works has a following practice: I might not be making sense below, please feel free to questions so that I can provide additional context. Apologies, I am quite new to Azure so I wasn't sure when I had a discussion with my friend regarding Account Disabling/ MFA enabling and SSO.

PVS-Studio 7.26.74066.377 for windows download