Oauth, Saml, Enterprise Applications, Permissions, app registrations, conditional access, Microsoft Entra ID, B2B settings, federated integrations, runbook discipline, application constructs, consent, evidence capture, least privilege access reviews, service principals, Microsoft Graph PowerShell, SSO standards, configuration drift control, token claim concepts, OIDC