Enumerating MFA via Microsoft's Password Reset Portal

Microsoft’s Self-Service Password Reset (SSPR) portal is a legitimate feature designed to let users recover their accounts without calling the helpdesk. It turns out it also tells you quite a lot a...