Open Internet by MindsNet

Enumerating Entra Apps Without Compliant Devices

The user is seeking to understand if an attacker can enumerate Entra apps available to a user without a compliant device. Current CA policies require compliant devices for all apps except accessing rd web client via Entra app proxy. The user wants to assess short-term exposure before updating policies to require additional security measures like YubiKeys.

Computing & Technology, Computer Science, Programming Languages