Explore how Microsoft Entra ID's Privileged Identity Management (PIM) can create false security in this 24-minute conference talk from fwd:cloudsec. Discover the troubling reality behind widely-adopted just-in-time (JIT) access controls and learn why many organizations' PIM implementations reduce security to mere procedural formality. Examine how common configurations transform "just-in-time" access into "just-a-button" that sophisticated adversaries can easily circumvent, drawing from real-world analysis of diverse customer environments. Uncover specific gaps in PIM implementations and gain insights into improvements that convert checkbox security into meaningful protection, moving beyond the security veneer to understand how defense mechanisms can inadvertently become vulnerabilities in the evolving landscape of identity security.