Authentication bypass discovered in Microsoft Entra ID