IT departments like to controll all app permissions using just Active Directory because it simplfies their lives.

Teams uses Active Directory, and they can argue it's "good enough".