It seems like IAM users are really only useful for very small companies or for off-platform access. Anything more than a handful of users and it's probably best offloading your auth to some other federated platform

AD is extremely built out and well established so I guess no surprise Azure leans on it heavily. AD/Kerberos authentication is pretty slick, too