Identity-based threats on SaaS applications are a growing concern among security professionals, although few have the capabilities to detect and respond to them. 
According to the US Cybersecurity and Infrastructure Security Agency (CISA), 90% of all cyberattacks begin with phishing, an identity-based threat. Throw in attacks that use stolen credentials, over-provisioned accounts, and