OAuth Under Attack: Strengthening Identity Security with Admin Consent

Thursday, October 01, 2026 | 9:30AM–10:30AM MT
Session Type: Poster Session
Delivery Format: Poster Session
As OAuth-based attacks grow more prevalent in higher education, institutions must rethink how app consent decisions are made and governed. This session presents a security-focused case study on enabling admin consent for OAuth apps in Entra ID, highlighting the controls, review criteria, and lessons learned that strengthened our identity security posture.

Presenters

  • Garrett Dutton

    Enterprise Architect, Kentucky Community & Technical College System

  • Jeremy Miller

    Associate Vice President of Enterprise Systems, Kentucky Community & Technical College System