Federated sign-in security requirements

Source history: extracted from the page's source file at a commit; shared includes are not expanded

Requirements, exceptions and scope

• How federated domains workScope1 passage
• Simplified federated sign-in flowScopeRecommendation2 passages
• How Federated Token Validation Policy worksException2 conditions1 passage
• Subdomain sign-in behaviorRequirement1 condition1 passage
• Security risk without the policyScope2 conditions1 passage
• How Microsoft is strengthening securityScope1 condition1 passage
• Identify cross-domain sign-in dependenciesScope1 passage
• Avoid reducing policy protectionsException2 conditions2 passages
• allFederatedExceptionScope1 condition1 passage
• allManagedExceptionScope1 condition1 passage
• enumeratedScopeRecommendation1 passage
• allManagedAndEnumeratedFederatedExceptionScopeRecommendation3 conditions3 passages
• Does the policy apply only when a tenant has multiple federated domains?Exception3 conditions1 passage
• Can an administrator allow cross-domain sign-in?Recommendation1 passage

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.