For example, during the 2023 MGM assault, the attacker directly accessed an account with Super Admin permissions in Okta, which they combined with an inbound federation attack to impersonate any user in the tenant, get Azure admin privileges, and authenticate on the Azure-hosted VMware natural envir