You have a Microsoft 365 subscription that contains the following resources: - 100 users that are assigned a Microsoft 365 E5 license - 100 Windows 11 devices that are joined to the Microsoft Entra…

Security defaults provide a baseline level of security, but they do not offer the granular control required to configure specific session token revocation based on a compromised account.

Microsoft Entra Verified ID is used for verifiable credentials and digital identity verification, not for managing or revoking user session tokens in the context of account compromise.

Conditional Access policies allow granular control over access to cloud apps and can be configured to enforce session controls, including the ability to revoke sessions based on risk signals from Microsoft Entra ID Protection or other conditions, ensuring immediate session termination for compromised accounts. Specifically, a Conditional Access policy can use the "Require reauthentication" control or a "Persistent browser session" control with a "Sign-in frequency" setting to revoke session tokens when a risk is detected or a user is reauthenticated, effectively terminating compromised sessions.

Microsoft Entra ID Protection detects risks and can trigger actions, but it does not directly configure the session token revocation itself; it feeds risk signals to Conditional Access policies which then enforce the action.