Recent Blog ArticlesMost RecentMost LikesAddressing data exfiltration: Token theft talk Explorer mitigations for theft-n-replay for various authentication scenarios and artifacts. Re: Addressing Data Exfiltration: Token Theft Talk Great question! In this blog I used word 'app' as synonymous to 'client' and word 'workload' for service. I updated the blog to clearly distinguish between clients and workloads. Hopefully, it resolv...How Tenant Restrictions v2 Can be Used to Prevent Data Exfiltration Cross-tenant security protections to restrict access and prevent data exfiltration without inhibiting collaboration. Apply Zero Trust Principles to Authentication Session Management with Continuous Access Evaluation Continuous Access Evaluation is our first step in building Session Management based on Zero Trust principles. Re: Apply Zero Trust Principles to Authentication Session Management with Continuous Access Evaluati TomAafloen Thank you for your kind words and for reporting the repetitive link. I submitted updated to the link, meanwhile here is the correct one:Session Management Reimagined: Continuous Ac...Re: Moving towards real time policy and security enforcement Kyle Berwaldt, the feature is enabled in Outlook monthly channel. Teams client is in the process of rolling out the change. Teams rollout will complete sometimes in May. Sankarasubramanian Para...Re: Manage authentication sessions in Azure AD conditional access is now in public preview! @Tony Rogers, the default lifetime is until the session revoked with 90 days of inactivity window. Andrew Liggett, this affects refresh tokens and session cookies. User will need to re-authentic...
MicrosoftMicrosoftMicrosoftMicrosoft
