For example, within the 2023 MGM attack, the attacker immediately accessed an account with Tremendous Admin permissions in Okta, which they coupled with an inbound federation attack to impersonate any person from the tenant, get Azure admin privileges, and authenticate into the Azure-hosted VMware a