Azure AD password protection is now generally available:
Azure AD password protection – how to eliminate bad passwords:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad
Deployment:
Architecture (to cover also onprem AD domain controllers):
