oauth ropc

The oauth ropc tag brings together security discussion about older authentication paths and the risks they can create when cloud access policies do not apply as expected. Current coverage focuses on a password-spraying campaign against Microsoft Azure CLI authentication, including millions of login attempts and compromised Microsoft accounts across multiple organizations. It also examines the difference between having MFA configured in a tenant and enforcing MFA across every relevant sign-in route. Readers can use this archive to follow how authentication methods, Conditional Access policy gaps, and legacy access paths affect identity protection in Microsoft cloud environments.