We've stopped using LDAP in favor of Microsoft Azure/Entra SSO, and this works extremely well.
LDAP, however, used to sync not only the users and emails, but also the Phone field. I know this can be done with other apps through adding an additional claim for the phone in the SAML setup, but I didn't see this was documented in the setup for Azure/Entra.
This would be extremely beneficial for keeping numbers and extensions up to date within MLWOs.