Skip to content

Commit 6649b63

Browse files
authored
Update caac-known-issues.md
1 parent afe7cdb commit 6649b63

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

CloudAppSecurityDocs/caac-known-issues.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -54,8 +54,7 @@ Session policies don't protect external business-to-business (B2B) collaboration
5454
## Session Controls with Non-Interactive Tokens
5555
Some applications utilize non-interactive access tokens to facilitate seamless redirection between apps within the same suite or realm. When one application is onboarded to Conditional Access App Control and the other is not, session controls may not be enforced as expected. For example, if the Teams client retrieves a non-interactive token for SharePoint Online (SPO), it can initiate an active session in SPO without prompting the user for reauthentication. As a result, the session control mechanism cannot intercept or enforce policies on these sessions. To ensure consistent enforcement, it's recommended to onboard all relevant applications, such as Teams, alongside SPO.
5656

57-
## IPv6 limitations for sessions served by reverse proxy and Edge in-browser protection
58-
57+
## IPv6 limitations
5958
Access and session policies support IPv4 only. If a request is made over IPv6, IP-based policy rules are not applied. This limitation applies when using both reverse proxy and Edge in-browser protection.
6059

6160
## Limitations for sessions that the reverse proxy serves

0 commit comments

Comments
 (0)