Token Protection Extends to Microsoft Graph PowerShell SDK

Token Protection Extends to Microsoft Graph PowerShell SDK

Token Protection, PRTs, Device Binding, and Session Keys Last year, I discussed how to use a conditional access policy to apply a new session control called token protection. The idea is to protect against token theft by requiring connections to have a token (the Primary Refresh Token, or PRT) that has a “cryptographically secure tie” with the device that the connection originates from. The PRT is “bound” to a device key that’s securely stored i…