Access Control 1 Authentication Is Not Authorisation: Walking Into an Internal Engineering Environment Through SSO Nov 4, 2026