Microsoft has addressed an Azure Active Directory (Azure AD) authentication flaw that could ... nOAuth attack flow (Descope) "If the app merges user accounts without validation, the attacker ...