Microsoft Entra ID

Token Protection

10 August 2026Updated+1 / −3 lines

In brief

The token protection article removes a screenshot of a Conditional Access policy requiring token protection as a session control. The Primary Refresh Token link remains.

What Entra admins need to know

This is a documentation presentation change; no administrator action or product behavior change is indicated.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

For browser-based applications in preview, enforcement is supported for Azure Resource Manager, configured in Conditional Access as the Windows Azure Service Management API resource. Only selected web applications that access Azure Resource Manager are supported. For details, see Token Protection deployment guide - Web apps.

:::image type="content" source="media/concept-token-protection/complete-policy-components-session.png" alt-text="Screenshot of a Conditional Access policy that requires token protection as the session control.":::

Supported devices

Windows:

Related content

~~What is a Primary Refresh Token?~~ \ No newline at end of file What is a Primary Refresh Token?

@@ -48,8 +48,6 @@ On Windows, enforcement is also supported for:  For browser-based applications in preview, enforcement is supported for Azure Resource Manager, configured in Conditional Access as the **Windows Azure Service Management API** resource. Only selected web applications that access Azure Resource Manager are supported. For details, see [Token Protection deployment guide - Web apps](deployment-guide-token-protection-web-apps.md). -:::image type="content" source="media/concept-token-protection/complete-policy-components-session.png" alt-text="Screenshot of a Conditional Access policy that requires token protection as the session control.":::- ### Supported devices  **Windows**:@@ -86,4 +84,4 @@ Select the guide for your target platform:  ## Related content  -[What is a Primary Refresh Token?](../devices/concept-primary-refresh-token.md)\ No newline at end of file+[What is a Primary Refresh Token?](../devices/concept-primary-refresh-token.md)