Sounds like there's additional governance options (notably, SIEM integration) and Enterprise SSO - but I suspect the main benefit from the enterprise pov is going to be the account management and support teams.
Managing apps via group policy is painful
From compliance checklist point of view, there may be enough difference. Addressing it is the point.
Additional features and the option to deploy all supporting services on prem.