Blog

Conditional Access articles.

3 articles tagged with Conditional Access.

Same Flow, Different IP: Investigating Conditional Access and OAuth Non-Interactive Sign-Ins

Why Conditional Access blocks the Claude M365 connector: public clients redeem auth codes from the vendor's IP, while confidential clients inherit the user's.

Nick Tillack30 Sept 202617 min read

Entra IDConditional Accesstoken-lifetimecontinuous-access-evaluation

The Malware Is Gone. The Token Still Works. Limiting Token Lifetimes in Entra ID

You revoked the sessions and the stolen access token still works. Every Entra ID token lifetime lever explained: CTL policies, sign-in frequency, CAE and Token Protection.

Rawson Wade12 June 202615 min read

Entra IDConditional AccessAuthentication ContextMFA

Stop Applying Sign-In Frequency to All Users. Use Authentication Contexts for Step-Up MFA

Sign-In Frequency on All Users isn't step-up MFA. Conditional Access authentication contexts give you per-action step-up MFA in Entra ID without punishing every user.

Rawson Wade19 May 202619 min read