Unlike RADIUS, which was designed for similar purposes, the TACACS+ protocol offers basic packet encryption but, as with most crypto designed back then, it's not secure and definitely should not be ...
Louis Mastelinck previews common Entra ID pitfalls around authentication, Conditional Access, privilege and app consent.