Identity Provider Recon
Maps enterprise identity fabrics, tenant federation boundaries, and executes pre-authentication user enumeration oracles safely without credential submission.
Identity Provider Recon provides structured OSINT and attack surface management tradecraft for fingerprinting enterprise identity providers (Microsoft Entra ID, Okta, ADFS, Google Workspace, and generic OIDC/SAML providers). It automates domain-to-tenant resolution, keyless tenant federation boundary mapping, and pre-auth user enumeration oracles (such as Microsoft GetCredentialType and Okta authn differentials) under strict operational guardrails. Designed for authorized red-team and penetration testing engagements, it enforces disciplined rate limiting, a strict 20-candidate cap per tenant, and a fail-closed candidate synthesis model while completely barring credential submission or password spraying.