WIP

Author: MicrosoftGuyJFlo

articles/active-directory/conditional-access/TOC.yml

@@ -39,6 +39,8 @@
     href: service-dependencies.md
   - name: Filter for applications
     href: concept-filter-for-applications.md
+  - name: Token binding
+    href: concept-token-binding.md
   - name: Location conditions
     href: location-condition.md
   - name: Workload identities

articles/active-directory/conditional-access/concept-token-binding.md

@@ -4,7 +4,7 @@ description:
 ms.service: active-directory
 ms.subservice: conditional-access
 ms.topic: conceptual
-ms.date: 02/16/2023
+ms.date: 02/21/2023
 
 ms.author: joflore
 author: MicrosoftGuyJFlo
@@ -19,8 +19,7 @@ Token binding attempts to reduce attacks using token theft by ensuring a token i
 
 Token binding creates a cryptographically secure tie between the token and the device (client secret) it's issued to. Without the client secret, the bound token is useless. When a user registers a Windows 10 or newer device in Azure AD, their primary identity is [bound to the device](../devices/concept-primary-refresh-token.md#how-is-the-prt-protected). This connection means that any issued sign-in token is tied to the device and can't be stolen or replayed. These sign-in tokens are specifically the session cookies in Microsoft Edge and most Microsoft product refresh tokens. 
 
-With this preview, we're giving you the ability to create a Conditional Access policy to require token binding for sign-in tokens for specific services. We support token binding for sign-in tokens in Conditional Access for Exchange online and SharePoint on Windows devices. 
-
+With this preview, we're giving you the ability to create a Conditional Access policy to require token binding for sign-in tokens for specific services. We support token binding for sign-in tokens in Conditional Access for Exchange Online and SharePoint Online on Windows devices.
 
 ## Requirements
 
@@ -87,5 +86,4 @@ After confirming your settings using [report-only mode](howto-conditional-access
 
 ## Next steps
 
-- [Blog post: It’s time for token binding](https://www.microsoft.com/microsoft-365/blog/2018/08/21/its-time-for-token-binding/)
 - [What is a Primary Refresh Token?](../devices/concept-primary-refresh-token.md)