Are you blocking ROPC after the Azure CLI password spray reports?
I've seen reports of password spraying involving Azure CLI and ROPC. Are you blocking that flow with Conditional Access, and what should be checked before doing it?
I've seen reports of password spraying involving Azure CLI and ROPC. Are you blocking that flow with Conditional Access, and what should be checked before doing it?
I'm trying to authenticate a user using the ROPC flow via a REST API, aiming for full automation without any user interaction. However, even though I've disabled MFA…