Common Entra ID Security Assessment Findings – Part 4: Weak Conditional Access Policies