umbraco-security-external-logins

This code configures Okta login but grants every automatically linked Okta user the admin role and approves the account without checking group membership, creating a high-severity authorization vulnerability. It also saves authentication tokens and denies local login; no token exfiltration or other malware behavior is shown. Restrict linking and administrative roles to explicitly authorized identities and ensure a recovery login remains available.