The ability to force single sign on with 365 so that logins are logged and we can enforce conditional access and 2FA policys