home.social
Sign in Create account

#refreshtoken β€” Public Fediverse posts

Live and recent posts from across the Fediverse tagged #refreshtoken, aggregated by home.social.

  1. F0rm4t @[email protected] Β·

    I'd like to point out this really interesting article on the topic: π“π¨π€πžπ§ π“π‘πžπŸπ­ π“πšπ₯𝐀.

    Key points and topics covered:

    - Primary Refresh Tokens (PRT) on all operating system platforms have been hardened against theft from day one. The level of protection depends on operated system capabilities, with Windows offering the strongest protection.

    - First line of defense against token theft is protecting your devices by deploying endpoint protections, device management, MFA (and moving towards phishing-resistant credentials), and antimalware

    You can reduce token theft by carefully orchestrating Entra ID security products:

    β–ΆAddressing token theft of sign-in session artifacts: Conditional Access: Token protection policy offers cryptographic protection against replay of stolen tokens.

    β–ΆAddressing token theft of app session artifacts: block usage of stolen access tokens and workload cookies outside of your corporate network by using Conditional Access.

    β–ΆDetecting token theft: enable risk detections with Microsoft Entra ID Protection to elevate user risk when token theft is suspected.

    techcommunity.microsoft.com/t5

    #microsoft #microsoftsecurity #entraid #azuread #azure #idp #token #tokentheft #cloudsecurity #identity #prt #cookies #identityprotection #mfa #cae #conditionalaccess #refreshtoken #token

    #microsoft #microsoftsecurity #entraid #azuread #azure #idp