Comment by ExoticPearTree

> That's leaving the most critical component still with a US company. Doesn't fly if the goal is what the Danish agency is trying to achieve.

Yes, because it is very hard to replace. I said that you could move to Okta or something similar (in this or in another comment), but this requires you have pretty modern apps that can integrate with SAML/OAuth/OIDC.

And, even staying with MS for a few more years while you migrate IAM to something else is not as bad as having the full Office stack. You can't just yank out everything overnight - I mean you could, but you have to spend a ton of money to have a 1:1 solution from the get-go.