Curated security research, vulnerabilities, advisories and tools for practitioners.

How Privileged Identity Management Affects Conditional Access Policies

Summary

Introduction When administrators use directory roles (aka Entra ID roles) when configuring Conditional Access Policies (CAPs), users are not included in the enforcement of that CAP until after that user’s role assignment is activated. If administrators use Privileged Identity Management (PIM) for role assignments, this adds complexity because role eligibility is not considered for roles […]
Published
Collected