Permissions, Saml, Oauth, Enterprise Applications, runbook discipline, service principals, consent, app registrations, Microsoft Entra ID, B2B settings, least privilege access reviews, evidence capture, SSO standards, conditional access, configuration drift control, application constructs, Microsoft Graph PowerShell, federated integrations, OIDC, token claim concepts