Skip to content

Commit 20b3f9b

Browse files
Merge pull request #220326 from swetha-rai/patch-2
Update workload-identity.md
2 parents d87e747 + 1bfd0ca commit 20b3f9b

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

articles/active-directory/conditional-access/workload-identity.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Azure Active Directory Conditional Access for workload identities preview
2+
title: Azure Active Directory Conditional Access for workload identities
33
description: Protecting workload identities with Conditional Access policies
44

55
services: active-directory
@@ -15,9 +15,9 @@ ms.reviewer: dawoo
1515

1616
ms.collection: M365-identity-device-management
1717
---
18-
# Conditional Access for workload identities preview
18+
# Conditional Access for workload identities
1919

20-
Previously, Conditional Access policies applied only to users when they access apps and services like SharePoint online or the Azure portal. This preview adds support for Conditional Access policies applied to service principals owned by the organization. We call this capability Conditional Access for workload identities.
20+
Conditional Access policies have histroically applied only to users when they access apps and services like SharePoint online or the Azure portal. We are now extending support for Conditional Access policies to be applied to service principals owned by the organization. We call this capability Conditional Access for workload identities.
2121

2222
A [workload identity](../develop/workload-identities-overview.md) is an identity that allows an application or service principal access to resources, sometimes in the context of a user. These workload identities differ from traditional user accounts as they:
2323

@@ -28,12 +28,12 @@ A [workload identity](../develop/workload-identities-overview.md) is an identity
2828
These differences make workload identities harder to manage and put them at higher risk for compromise.
2929

3030
> [!IMPORTANT]
31-
> In public preview, you can scope Conditional Access policies to service principals in Azure AD with an Azure Active Directory Premium P2 edition active in your tenant. After general availability, additional licenses might be required.
31+
> Conditional Access policies can be scoped to to service principals in Azure AD with Workload Identities Premium licenses.
3232
3333
> [!NOTE]
3434
> Policy can be applied to single tenant service principals that have been registered in your tenant. Third party SaaS and multi-tenanted apps are out of scope. Managed identities are not covered by policy.
3535
36-
This preview enables blocking service principals from outside of trusted public IP ranges, or based on risk detected by Azure AD Identity Protection.
36+
Conditional Access for workload identities enables blocking service principals from outside of trusted public IP ranges, or based on risk detected by Azure AD Identity Protection.
3737

3838
## Implementation
3939

0 commit comments

Comments
 (0)