Azure SSO security question Hi,

What say this group regarding the security implications of integrating Azure SSO with vendors for the purpose of giving users access to the vendor application?

The benefits, aside from being convenient to the user, is that it enforces the organization's password policy and not the vendor's. Additionally, MFA can be enabled on the Org side.

What are the security drawbacks, if any, of doing this? The idea is for the user to have access to the vendor app but not the other way around. The vendor should not have access to the Org. What are the risks of an Azure SSO integration with a vendor for access to vendor app?