Here’s an interesting escalation attack against Azure AD, a commonly used Identity Provider from June, 2023.