AD managed with PowerShell is the bomb. As sole IT person, I deployed it at a company with only 35 users, made my life so easy. I had scripts that would handle 90% of the on and offboarding work, even outside the MS environment.
Next company used Google for auth and it was a damned nightmare to manage user on and off boarding. We had zero device management of any sort.