Using Conditional Access app control, browser sessions can be routed through Microsoft Defender for Cloud Apps, where this kind of policy watches and restricts user actions in real time, for example stopping sensitive files from being downloaded.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Session policy in context, with comparison tables and the common traps.
Terms in this definition
- Conditional Access App Control
Routes browser sessions through a Defender for Cloud Apps reverse proxy so that Entra Conditional Access can enforce access and session policies on them as they happen.
- Microsoft Defender for Cloud Apps
Cloud access security broker (CASB) from Microsoft, providing discovery of SaaS apps, session control and protection of data.
- WHERE
Limits a SELECT, UPDATE or DELETE to just the rows meeting a condition. Omit it, and the statement hits every row.
- Exclusions
Scopes taken out of a policy assignment; they can only narrow its coverage, never widen it.
- User actions
Conditional Access can protect two tasks as well as apps: registering or joining devices, and registering security information.