Oauth, Saml, Enterprise Applications, Permissions, conditional access, app registrations, Microsoft Entra ID, B2B settings, federated integrations, runbook discipline, least privilege access reviews, evidence capture, service principals, Microsoft Graph PowerShell, SSO standards, token claim concepts, configuration drift control, OIDC