Supporting AzureAD Conditional Access Policy across VSTS

This post details the upcoming support for Azure AD Conditional Access Policy (CAP) across VSTS by enabling the passing of client IP addresses in refresh token requests. This will allow VSTS to proactively block calls that do not meet the CAP IP policy. The change is planned for delivery during 2018 Q2. In the interim, APIs are provided for administrators to audit activity within an account, returning IP address and authentication mechanism for custom business logic to monitor and flag abnormalities. A sample on GitHub is shared for this purpose.