At this stage, it’s basically a scenario of using the self service password reset operation for Okta or Entra (which you'll get around as you now contain the MFA variable to confirm you) and voila, the attacker has taken Charge of the account.  What this means is you must be strate