As we've discussed throughout this book, identity is the basis of security in Microsoft 365. It's the single most important entity and controls access to data, applications, and resources. With an Intune co-managed CM deployment and hybrid AAD joined devices, you get additional benefits:

• Automatic device licensing
• Self-service password reset
• Self-service BitLocker recovery
• Enterprise state roaming
• Device-based Conditional Access
• Windows Hello for Business
• Single sign-on to cloud-based resources

You can learn more about the hybrid AD benefits of co-management here: https://docs.microsoft.com/en-us/configmgr/comanage/quickstart-hybrid-aad.