Attackers target Identity Providers (IdPs) like Okta, Azure AD, or Google Workspace to gain access across all connected applications.
Why it matters:
- One compromised SSO account = total access.
- Extremely high-impact in modern cloud environments.
Pro tip: Protect SSO accounts with MFA, conditional access, and strict auditing.
« Back to Glossary Index