Which Azure service manages user identities and offers SSO and MFA?

Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management service. It enables organizations to manage user identities, providing features like single sign-on (SSO) across cloud and on-premises applications, and multi-factor authentication (MFA) for enhanced security. Azure AD is fundamental for controlling who has access to what resources. Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources, not user identities. Azure Monitor is a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments. Azure Policy helps enforce organizational standards and assess compliance at scale, but it doesn't manage user identities directly.