failed to properly validate the originating tenant

One wonders whether those who designed all this ever considered what that field in the token is for.

The word "tenant" is also very telling --- you're just renting, and the "landlord" always has the keys.

I imagine this paid out quote the bounty; exploited, it's hard to think of a more damning security flaw.

Absolutely insane. Security so weak, it seems like you discovered an intentional backdoor.

Wow the keys to all the enterprise castles! That’s wild!

Oh man, I was close with this a few times as I ran powershell in different ISE windows and sometimes copied/pasted things over for different tenants, darn - it really seemed so obvious of an exploit!

Was there a bounty?