At this stage, it’s basically a circumstance of utilizing the self service password reset features for Okta or Entra (which you can get all-around as you now have the MFA factor to verify by yourself) and voila, the attacker has taken Charge of the account.  Optimizing your web site fo