Скачать с ютуб More secure and resilient apps built on Azure AD Continuous Access Evaluation | OD120 в хорошем качестве

More secure and resilient apps built on Azure AD Continuous Access Evaluation | OD120

Continuous Access Evaluation, CAE, allows access to an API, resource, protected by Azure AD to be revoked in near real time. Instead of a fixed time-based access, CAE access can be based on security events like the user's password changing, MFA being applied, or even the user changing their location. In this session we will demonstrate building a client app with CAE support. We also discuss the evolution of CAE going forward. Jump to: 00:00 Introduction 00:31 How applications work when using modern authentication 00:36 Apps ask Microsoft identity for tokens 01:17 App receives an access token 02:13 App calls API / Authorization with JWT 03:52 Introspection 04:44 Shared Signals and Events 06:36 Critical event evaluation 07:24 Conditional Access policy evaluation 08:16 Called API Continuous Access Evaluation 08:32 Claims Challenge 09:50 Demonstration 16:27 CAE boosts session protection 16:55 What's next? 17:32 Closing Notes Microsoft Build 2022