Azure AD
Named by 3 kept items in this workspace.
2 items name it under tools and 1 under affected products.
Search every workspace for Azure AD. It matches the name as written, so it can find other things that share it.
The items that name it 3
SSO/OIDC identity provider ThinkWatch can plug into
IdP login/event monitoring, shadow admin detection
Referenced in prior Huntress research on OAuth device code phishing
All technologies in this workspace.