Workload Identity Sign-In Without Conditional Access Enforcement

Duo Tech@duotech

•updated Aug 27, 2026•25•0•7

Detects service-principal/workload-identity sign-ins occurring without an enforced Conditional Access policy — a gap CISA's red team exploited for unauthorized cloud access.