Closing the Identity Gap at the Service Desk

Strong login controls such as multi-factor authentication and conditional access policies can be undermined when account recovery through the service desk relies on weaker checks. Knowledge-based questions may allow an attacker to convincingly impersonate an employee and obtain a password reset or account recovery.