Blog

Step-Up Authentication articles.

3 articles tagged with Step-Up Authentication.

One Token, Twenty Approvals. Building Step-Up Authentication That Defeats Token Replay

A satisfied authentication context can be replayed against your API for an hour. We demonstrate the replay, then build step-up auth in Entra ID that binds one auth to one operation.

Rawson Wade12 June 202616 min read

Entra IDConditional Accesstoken-lifetimecontinuous-access-evaluationStep-Up Authentication

The Malware Is Gone. The Token Still Works. Limiting Token Lifetimes in Entra ID

You revoked the sessions and the stolen access token still works. Every Entra ID token lifetime lever explained: CTL policies, sign-in frequency, CAE and Token Protection.

Rawson Wade12 June 202615 min read

Entra IDConditional AccessAuthentication ContextMFAStep-Up Authentication

Stop Applying Sign-In Frequency to All Users. Use Authentication Contexts for Step-Up MFA

Sign-In Frequency on All Users isn't step-up MFA. Conditional Access authentication contexts give you per-action step-up MFA in Entra ID without punishing every user.

Rawson Wade19 May 202619 min read

Step-Up Authentication articles.

One Token, Twenty Approvals. Building Step-Up Authentication That Defeats Token Replay

The Malware Is Gone. The Token Still Works. Limiting Token Lifetimes in Entra ID

Stop Applying Sign-In Frequency to All Users. Use Authentication Contexts for Step-Up MFA

How would you like to start?

Book a call

See our work

Explore services

We use cookies