Exploiting Pass-through Authentication Validation in Azure AD 

https://cymulate.com/blog/exploiting-pta-credential-validation-in-azure-ad/