Oauth, Saml, Enterprise Applications, Permissions, conditional access, app registrations, Microsoft Entra ID, B2B settings, federated integrations, runbook discipline, application constructs, consent, evidence capture, least privilege access reviews, service principals, Microsoft Graph PowerShell, SSO standards, configuration drift control, token claim concepts, OIDC