DEFCON 3 · ELEVATED OBSERVATORY STATUS
04:24:00 UTC
EXPLORE DIRECTORY
LAST SYNCHRONIZED: 2026-08-29
software

Microsoft Entra ID (Azure AD)

EXECUTIVE INTELLIGENCE SUMMARY

Cloud-based identity and access management service orchestrating authentication and access tokens for hundreds of millions of corporate users.

Focal battleground for identity-based attacks, OAuth token theft, OAuth consent phishing, and Golden SAML forging by groups like Midnight Blizzard and Scattered Spider.

SOURCE CITATIONS & ATTESTATIONS (1)
Mandiant Cloud Identity Threat AssessmentMandiant

Securing Cloud Identity Plane

TELEMETRY CARDID: software-microsoft-entra-id
ENTITY TYPE
software
INDEXED TAGS
#identity#cloud_iam#oauth#saml#token_theft