BA Lab 14 – Authenticated Entra ID enumeration & Illicit Consent Attack