DCSG1- Impersonate Me Misconfigurations in Entra ID and Identity Libraries - Nikhil Sahoo

Name: DCSG1- Impersonate Me Misconfigurations in Entra ID and Identity Libraries - Nikhil Sahoo
Uploaded: 2026-09-30T00:00:00.000Z
Duration: 51 min 16 s
Description: Misconfiguring Entra ID apps to trust mutable claims like email/preferredusername or to disable signature checks lets attackers with any valid Entra token impersonate victims and escalate to admin.

DEFCONConference · 51:16 · Watch on YouTube

Misconfiguring Entra ID apps to trust mutable claims like email/preferredusername or to disable signature checks lets attackers with any valid Entra token impersonate victims and escalate to admin.

Read the full summary on retube

한국어