It is beneficial to set up Azure AD environments, because Azure AD is, by default, as follows:

• Flat and simple
• Easy to set up
• Not hierarchical

Azure AD relies on oAuth 2.0, which is a default and standardized authentication method.

oAuth is an open standard used to delegate access. In general, it is for internet users, and is used to grant access to websites or applications on websites without password exchanges. This authentication mechanism is used by companies like Twitter, Microsoft, Google, and Amazon, to grant access to their services provided via the internet:

At first, oAuth 2.0 may seem complex. But the more you understand it, the more flexible it will be, and, as it is designed for web-based authentication by default, there is no need to translate it into something else.