Some ramblings around Continuous access evaluation, support for Graph and service principals

This article delves into the topic of Continuous Access Evaluation and its support for Graph and service principals. The author explores whether the Graph resource supports CAE and how long-lived CAE tokens are issued. They also consider whether accepting additional risk for CAE is worth it in certain scenarios.

However, the article also highlights the potential dangers of using CAE-capable service principal, particularly in situations where they may be compromised. The author notes that the support for revocation of such service principals is unclear, leaving room for potential security vulnerabilities.

If you are a security professional working with Continuous Access Evaluation or Graph resources, this article provides valuable insights and considerations for ensuring secure access management.

Continue reading this article on https://www.michev.info.