For example, while in the 2023 MGM attack, the attacker directly accessed an account with Tremendous Admin permissions in Okta, which they combined with an inbound federation assault to impersonate any consumer from the tenant, get Azure admin privileges, and authenticate on the Azure-hosted VMware atmosphere in which they deployed ransomware. ???