The MDM stuff is there now, and platform SSO works pretty well, at least with Entra and Okta (the only two I have experience with). Both JamF and InTune support it, I'm sure all the other MDMs do as well.
The only time macs can be a bit of a headache is if you are still using all on-prem AD & group policy and trying to force them into that environment via joining the mac to AD.
