Azure AD can be used for Identity and Authentication (ie. when you login to Safeguard).
Azure AD accounts can be managed by Safeguard (in version 6.8 and above).
SPP can be used to manage Windows/Linux hosts on Azure (as long as the ports/requirements are accessible etc)
It's possible to deploy the SPP VM into Azure
More information is available in the Admin Guide under the "Cloud Deployment Considerations" section.
https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/6.11/administration-guide/6#TOPIC-1668227