Device Registration

Register an adversary-controlled device to a compromised user's Microsoft Entra identity using an access token accepted by the device registration service. If tenant policy permits, the resulting device identity can support persistent device-bound authentication or abuse of device-based access controls. Registration alone does not bypass MFA or guarantee access to cloud resources; the authentication context, device state and Conditional Access policies govern subsequent access.