Comments on: The Right Way to Revoke Access from Entra ID User Accounts with PowerShell

By: WeeLamm

WeeLamm — Tue, 09 Apr 2024 12:45:10 +0000

In reply to Tony Redmond. Thank you for the link, it is turning into a good read. :-)

By: Tony Redmond

Tony Redmond — Mon, 08 Apr 2024 22:43:56 +0000

In reply to WeeLamm.

I don’t think so. Entra ID treats the password change as a critical event and any application that supports continual access evaluation (https://office365itpros.com/2022/01/12/continual-access-evaluation/) will force reauthentication.

By: WeeLamm

WeeLamm — Mon, 08 Apr 2024 22:39:18 +0000

Just curious, should we revoke Sessions twice to prevent the user from using a different but previously successful device from refreshing the token based on knowing the token of a previously successful session?

If so, should we also reset the password twice for good measure?

By: Tony Redmond

Tony Redmond — Wed, 24 Jan 2024 17:04:40 +0000

In reply to Jonathan Knightly. Yep. I believe so.

By: Jonathan Knightly

Jonathan Knightly — Wed, 24 Jan 2024 17:01:36 +0000

Hi Tony, great article! Can you confirm if the ‘Revoke Sessions’ button in the Entra ID GUI has the same effect, or not, as the ‘Revoke-MgUserSignInSession’ command?

To be clear this is the ‘Revoke Sessions’ button in the following area:

Entra ID>Users>[Select User Account]>Overview Section>Revoke Sessions (Button)