Microsoft identity-driven security