Conditional Access session controls
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 6d11778 · +4 −6 lines · also on GitHub
⋯ 4 unchanged lines
55
ms.service: entra-id
66
ms.subservice: conditional-access
77
ms.topic: article
8
−ms.date: 08/13/2024
8
+ms.date: 08/20/2025
99
1010
ms.author: joflore
1111
author: MicrosoftGuyJFlo
1212
manager: dougeby
13
−ms.reviewer: calebb, vmahtani, ripull
13
+ms.reviewer:
1414
---
1515
# Conditional Access: Session
1616
⋯ 64 unchanged lines
8181
8282
If resilience defaults are disabled, access is denied once existing sessions expire. For more information, see the article [Conditional Access: Resilience defaults](resilience-defaults.md).
8383
84
−## Require token protection for sign-in sessions (preview)
85
−
86
−Token protection (sometimes referred to as token binding in the industry) attempts to reduce attacks using token theft by ensuring a token is usable only from the intended device. When an attacker is able to steal a token, by hijacking or replay, they can impersonate their victim until the token expires or is revoked. Token theft is thought to be a relatively rare event, but the damage from it can be significant.
84
+## Require token protection for sign-in sessions
8785
88
−The preview works for specific scenarios only. For more information, see the article [Conditional Access: Token protection (preview)](concept-token-protection.md).
86
+Token protection (sometimes referred to as token binding in the industry) attempts to reduce attacks using token theft by ensuring a token is usable only from the intended device. When an attacker is able to steal a token, by hijacking or replay, they can impersonate their victim until the token expires or is revoked. Token theft is thought to be a relatively rare event, but the damage from it can be significant. For more information, see the article [Conditional Access: Token protection](concept-token-protection.md).
8987
9088
## Use Global Secure Access security profile
9189
⋯ 6 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 07:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.