Skip to content

Commit c38e345

Browse files
authored
Merge pull request #87733 from baywet/patch-1
updates the powershell revoke command to MS Graph PS
2 parents 2fbe052 + 11a5dc5 commit c38e345

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/active-directory/conditional-access/concept-continuous-access-evaluation.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -114,7 +114,7 @@ If you aren't using CAE-capable clients, your default access token lifetime will
114114

115115
1. A CAE-capable client presents credentials or a refresh token to Azure AD asking for an access token for some resource.
116116
1. An access token is returned along with other artifacts to the client.
117-
1. An Administrator explicitly [revokes all refresh tokens for the user](/powershell/module/azuread/revoke-azureaduserallrefreshtoken). A revocation event will be sent to the resource provider from Azure AD.
117+
1. An Administrator explicitly [revokes all refresh tokens for the user](/powershell/module/microsoft.graph.users.actions/revoke-mgusersign). A revocation event will be sent to the resource provider from Azure AD.
118118
1. An access token is presented to the resource provider. The resource provider evaluates the validity of the token and checks whether there's any revocation event for the user. The resource provider uses this information to decide to grant access to the resource or not.
119119
1. In this case, the resource provider denies access, and sends a 401+ claim challenge back to the client.
120120
1. The CAE-capable client understands the 401+ claim challenge. It bypasses the caches and goes back to step 1, sending its refresh token along with the claim challenge back to Azure AD. Azure AD will then reevaluate all the conditions and prompt the user to reauthenticate in this case.
@@ -168,7 +168,7 @@ Changes made to Conditional Access policies and group membership made by adminis
168168

169169
When Conditional Access policy or group membership changes need to be applied to certain users immediately, you have two options.
170170

171-
- Run the [revoke-azureaduserallrefreshtoken PowerShell command](/powershell/module/azuread/revoke-azureaduserallrefreshtoken) to revoke all refresh tokens of a specified user.
171+
- Run the [revoke-mgusersign PowerShell command](/powershell/module/microsoft.graph.users.actions/revoke-mgusersign) to revoke all refresh tokens of a specified user.
172172
- Select "Revoke Session" on the user profile page in the Azure portal to revoke the user's session to ensure that the updated policies will be applied immediately.
173173

174174
### IP address variation

0 commit comments

Comments
 (0)