Openid Connect

detecting-oauth-token-theft helps investigate OAuth token theft, replay, and session hijacking in Microsoft Entra ID and M365. Use this detecting-oauth-token-theft skill for Security Audit, incident response, and hardening reviews. It focuses on sign-in anomalies, suspicious scopes, new devices, and containment steps.

The configuring-oauth2-authorization-flow skill helps you design and validate OAuth 2.0 authorization setups for Access Control, with Authorization Code + PKCE, Client Credentials, and Device Authorization Grant. Use this configuring-oauth2-authorization-flow guide to choose grants, set redirect URIs, review scopes, and align with OAuth 2.1 best practices.