Microsoft identity platform – Secure applications and APIs by validating claims
learn.microsoft.com
learn.microsoft.com
Abusing Entra OAuth for fun and access to internal Microsoft applications https://news.ycombinator.com/item?id=44850681
It should be an interesting read if you work with authentication or use Microsoft Entra in any way.