PRT – Primary Refresh Token
Simplify collaboration and organisation with PRT.
IT Glossary
In brief
Under the motto Bring your own device , employees in more and more companies are able to bring their own devices. However, to work efficiently with them, it is necessary to grant them access to the company network. But this is no easy task. On the one hand, it is important to restrict access to authorised employees. On the other hand, it is necessary to make integration as simple and convenient as possible. It should not be necessary to enter complicated passwords time and time again to authenticate. The Primary Refresh Token (PRT) is an instrument that enables a device securely and conveniently to be integrated into the network.
Single Sign On: optimal convenience for employees
Azure Active Directory is a service that significantly simplifies collaboration and organisation in a company. To use it, employees require appropriate access to the company server. Reliable authentication is very important here. If this does not happen, it is very easy for unauthorised persons to access the relevant information. This can have serious consequences. Nevertheless, it is important to make access as simple as possible. To combine both requirements, Microsoft offers Single Sign On for this system. This term means that employees only need to register once.
The system then saves the corresponding device. In this way, it is not necessary to identify oneself again with a password during subsequent access. This reduces the workload and thus enables an efficient way of working. Only after an extended period of time is it necessary to repeat the authentication.
In this way, the user can access various Azure AD services. The use of Office 365 is also possible in this way. In addition, the company can integrate further SaaS offerings into the system.
Primary Refresh Token: an important instrument for Single Sign On
To enable Single Sign On, the system uses what is known as a Primary Refresh Token (PRT). The PRT contains data about the user and the device. When a user logs in for the first time or when their session has expired, they must identify themselves. This requires either a username with a password or Windows Hello to be used. The relevant data must be stored on the server. The server then checks whether the user is authorised to access. If this is the case, it transmits a token.
This is a small program, which enables an authentication key to be created.
During the next session, the token transmits the data to the server. The server registers the device and checks whether it is authorised for access. This process runs completely automatically, so that no effort is required from the user.
New Media Service GmbH: diverse services relating to Microsoft Azure
The use of Primary Refresh Tokens is not always straightforward. Furthermore, correct application is very important to maintain security in your business. Therefore, at New Media Service GmbH, we are happy to take care of setting up this system. In addition, we offer training courses to instruct your employees in how to handle it correctly.
If you would like to find out more, you can simply contact us for a free and non-binding consultation. We will be happy to inform you about this topic and, if required, take care of the implementation and execution for you.
Solutions in a new dimension.
One conversation is enough to find out where IT, Microsoft Cloud and AI can take real weight off day-to-day business.
Your contact: Jan Emmerich, Managing Director