Learn about Continuous Access Evaluation (CAE) in this 28-minute technical video that explores token security mechanisms and protection strategies. Dive deep into token fundamentals, access token functionality, and the critical components of CAE implementation. Master the handling of critical user events, understand supported services, and learn to verify CAE usage through practical demonstrations. Explore requirement specifications, revocation events, SLA considerations, and claims challenges. Discover the benefits of longer-lived tokens, conditional access location awareness, and strict enforcement options. Through multiple demonstrations and detailed explanations, gain comprehensive knowledge about split-path architecture, Entra safety measures, and best practices for implementing secure token management in your environment.
Continuous Access Evaluation and Token Security in Microsoft Entra
John Savill's Technical Training via YouTube
Overview
Syllabus
- Introduction
- Token refresher
- Access Token
- Continuous Access Evaluation
- Critical user events
- Services supported
- CAE capable clients
- Checking if CAE is being used
- Demo part 1
- Requirement summary
- Revocation events and SLA
- Demo part 2
- 401 and claims challenge
- Longer lived tokens
- CA location awareness
- Split path warning with strict enforcement
- Demo part 3
- Strict enforcement CA option
- Split-path architecture
- Entra safety for split path
- Summary
- Close
Taught by
John Savill's Technical Training
