How to restrict Device Code Flow in Entra ID

Check out this article via web browser: How to restrict Device Code Flow in Entra ID

For good reasons, device code flow in Entra ID is getting a lot of attention. Attackers heavily use it to get access to Microsoft 365 accounts and data. Device code phishing is very effective, as phishing-resistant MFA, like passkeys, are not helping here. The victim will simply hand over an access token to the attacker.… 

The post How to restrict Device Code Flow in Entra ID appeared first on JanBakker.tech.