Fabian • 4/7/2026

Avoid Entra Conditional Access using alternative token broker

This article explores methods to bypass Entra ID Conditional Access using alternative token brokers, highlighting security flaws in Microsoft's zero trust architecture. It discusses prior research on Primary Refresh Token abuse, cookie persistence risks, and introduces the sccauth cookie used by Defender portal. The content covers technical details on how attackers can exploit token retrieval from compromised devices, bypassing network and device compliance controls. Relevant to IT/technology professionals interested in Entra ID security, token authentication, and conditional access vulnerabilities.

0 comments

#Powershell #Azure Ad #Entra ID