For example, within the 2023 MGM attack, the attacker instantly accessed an account with Super Admin permissions in Okta, which they coupled with an inbound federation attack to impersonate any person while in the tenant, get Azure admin privileges, and authenticate to your Azure-hosted VMware surroundings where they deployed ransomware. My Young