OAuth Under Attack: Strengthening Identity Security with Admin Consent

Thursday, October 01, 2026 | 9:30AM–10:30AM MT | EDUCAUSE Commons, Cybersecurity & Privacy Hub, Poster Area
Session Type: Poster Session
Delivery Format: Poster Session
As OAuth-based attacks grow more prevalent in higher education, institutions must rethink how app consent decisions are made and governed. This session presents a security-focused case study on enabling admin consent for OAuth apps in Entra ID, highlighting the controls, review criteria, and lessons learned that strengthened our identity security posture.

Presenters

  • Garrett Dutton

    Senior Enterprise Architect, Kentucky Community & Technical College System

  • Jeremy Miller

    Associate Vice President of Enterprise Systems, Kentucky Community & Technical College System

Resources & Downloads

  • Poster Session OAUTH Under Attack

    Updated on 9/30/2026