For example, in the 2023 MGM assault, the attacker instantly accessed an account with Super Admin permissions in Okta, which they coupled with an inbound federation assault to impersonate any person inside the tenant, get Azure admin privileges, and authenticate to the Azure-hosted VMware environmen