For example, from the 2023 MGM attack, the attacker immediately accessed an account with Tremendous Admin permissions in Okta, which they combined with an inbound federation attack to impersonate any consumer during the tenant, get Azure admin privileges, and authenticate to the Azure-hosted VMware