For example, in the 2023 MGM attack, the attacker specifically accessed an account with Super Admin permissions in Okta, which they coupled with an inbound federation assault to impersonate any user inside the tenant, get Azure admin privileges, and authenticate for the Azure-hosted VMware atmosphere wherever they deployed ransomware. In summary,