<mxfile host="app.diagrams.net" agent="architecture-diagram" version="24.0.0">
  <diagram name="Workforce SSO &amp; Conditional Access — one sign-in" id="12-workforce-sso-flow">
    <mxGraphModel dx="1400" dy="900" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1760" pageHeight="930" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="n.emp" value="&lt;b&gt;Employee&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#08427b;strokeColor=#073b6f;fontColor=#ffffff;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="60" y="80" width="210" height="730" as="geometry" />
        </mxCell>
        <mxCell id="_plate1" value="" style="rounded=1;arcSize=22;html=1;fillColor=#ffffff;strokeColor=none;movable=0;resizable=0;connectable=0;" vertex="1" parent="n.emp">
          <mxGeometry x="5" y="13" width="32" height="32" as="geometry" />
        </mxCell>
        <mxCell id="_ico2" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.emp">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.app" value="&lt;b&gt;Application&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="300" y="80" width="210" height="730" as="geometry" />
        </mxCell>
        <mxCell id="_ico3" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.app">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.entra" value="&lt;b&gt;Entra ID&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="530" y="80" width="210" height="730" as="geometry" />
        </mxCell>
        <mxCell id="_ico4" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.entra">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.ca" value="&lt;b&gt;Conditional Access&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="770" y="80" width="210" height="730" as="geometry" />
        </mxCell>
        <mxCell id="_ico5" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.ca">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.dev" value="&lt;b&gt;Intune device state&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1010" y="80" width="210" height="730" as="geometry" />
        </mxCell>
        <mxCell id="_ico6" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.dev">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.key" value="&lt;b&gt;FIDO2 passkey&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1250" y="80" width="210" height="730" as="geometry" />
        </mxCell>
        <mxCell id="_ico7" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAAABmJLR0QA/wD/AP+gvaeTAAAHJklEQVR4nO2ba2wU1xXHf3dmd+1de20CJECKo/AILsYmgZRIqYrUJihq1apKqpB8SUMtVU1f6oc2ag1BVarSBpo2pVKjNKUfQlNVTRoFVJRUbZVEKA8hYWzAPCK7dgKmgDGLbfAu+5i5tx/2Nesx9s7OjLMx+Y+upbkzc+75n3vuPefe6xVsObEWaT4LopnZCsElFNvZ3von+6OOnh4QrX7rcMfCEO1r6m31Z6+Y7HhnzO/mASSIZrav+q+1MgBi1Uy0PjBisPf9hK0+lpAz0TyAhqAFmGgARP7mC7fV89v7F1Ab1GZKKd8gpeKvXWNs+/ewpbLINY+A9WZdUy21AQ2U/wr6DU0I1i+NTPteYGLFLOBeQDlcSgygAHWdWeATDyj5QM0uDyiHi80DZpULlAH7HPARKeIHHA8B+GQIoOy5wscW5XCZ1VHAcRicbXNAOSj1gNlmges9DDqeBK9DB7APgY86DMZTkjd6UmRM99EoaUjubZpfuG+sCf4s/MLI9/P3mpTvVZ0HnLoo6R8yy3p3UYOgMWw31OCIJJ7OvRMJWR/dbu1hJcQ9VZcISbP8Tli5QLAgaq83TEHfxbKkaPZJ8GOEN/rcb6dV3WpQFf7Aw3eHWbFI97yNvQeT9AwaQBVGAasOc+s0wgHvU/OGiFZoo+qigLV9vzrEKrPqtsSspP0akkpxDQ+gGoaAQuVYS3zSRxXb8H0tIElxKXOAEbOLuNFPSp3H4Co6IXQRJaI10ai3MTf4WSLaLdlhOFEnj2GlaRsCXiGjRjmd3M25zD4MFbc/B+A8cbOP4cybkPwdDXorWqAdRVtBHz/Oja5pAPBizElOp//CYPJFDMYdfXnZPAa1P2JZyxrODHwXJVf5Nwfk5JacgSmEq2KoqxxLdPBB8jnH5K2INnbTvPoHXDL2F5T1smTnluxVegioiu7htCTVBbrj7cSMtysmboWmX6U38wR98Zdcd8zEYjkO9SYRkqQ4meggIU+5Yz2J5CNjO6nR5rM4vMEzqUpeYwhknzovvYltXDFPeKbgRIW6Rn/BZaPfQ4nFyz4EHJaY8S4Xjf94phzAisgGGvRFhXtDJege3eHZHGDlafMAJ50vkZxO/8FT8ndFv8GGOZt54Mad1GnFzYxY+gjnkt7ML/kES2GLAg57P/MmcbPPE6UgS/4z0a8DEBRhAlpNyfOT4897Fw0mM0DBCGWWC+ZrnpFfF91UIJ9WcfbFfsKY8b+Sd8YyfYxmeiuOVMVJPpsKK6VKo0DnYIJ7ljcQ0qdfgkrSXDYPVUzYinXRTayLPgoUyQ+lT0767lDqXRoDK1y1Z412JQY4OBhn45/Lm21vvamXb30x7UoRcEYeIJY56jo9lgqkZTEUA+Y5FTK/4bxLNZyTB4gbp12nx1YP0BBso4I1R13tlUnrdRHivoU/5ta6u6b8vhLyACk54j4VtpQAT7XupOPoPyCw1IkBWpoOPQJsmlj/pUVbaGv8CrfPuZ9XBn/IB/EDnpEHkCpTUbZaAtt+wPbVA8CAExlNm+5cPZkmZxJHaWv8MgER4sGmZ2xGcEMeQBdh3Fog3/swWSpcJpRUZyarPzz6Kv8890tAERAhNjY9w/L69YB78gBh/SbXYTBbslfF5wICdcy6qrLi8OgeIDscdBHia4t/xZHh11lW83mgcvIA9fryQu9VCoUHHrC5pfskMHSt54dH9xQ8IZMyPSEPcENgrQeTYDERqtgAQqCAV6d65/DoHt67sJtUKpX7CF6Pba2YvBABbgyud+3/imzYk7jwAABN8BzThND9sd/zYeYdEIq3xnZwNn204vYWBu8lKOaULGcrvnIe4PrY5akTd+5W8KhbOdNBI8jd0b8R0T/lWtbeI+Ps703k5LqEifwpcNWtnOmwuOZBwvpivNkWm2I16BRbW7pPgXjMNcMpENVXsLT22x6Fv+JEKN1MglZsael8USCe9kLWRIS0ebRGfo2gtiSF9ap49tOQ1MrODqH4jVfyAALqZu6IPEuNtsC73gdUrvc98wCAJwVy86pDjyuh2oGUW3nDsTZuNnYR0ZZ4yBxLGFRIPDRAHk+s7HpBIpuVEn+kglWmYdSMHDr+HfYffBJBg9fcUYCJdTXoA7ITI49te3/NLt3UvqcEDwCNU3yiEKpTKXbve2tXJp2pf56ckm7X/pM2lnN/8MkAeWz9dHcn0P6y2vjN/uMfrlWaWo1StwghwhIlheCCRPVpAXVgy23dwwBtT0fbs/1E4RjLa+T3BMBnA+TxkPi7CRzMlSlhShNENj/rv5hG8+Gf18+MZTBnwgMqgQmInHIvdY343l7VGUACwsG4jwQFj3+ujkgQOs8avHIs6ai9qjMApkSK8v1+yQ06X12ZPUBZNi/Ayz3OsvKqM4BUmlKU7wLnxiXnxyWRoOD4kOF0s0RV3e9jlvx8oFnp6jVg7gw096//A5cxVuOAjKM+AAAAAElFTkSuQmCC;" vertex="1" parent="n.key">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.law" value="&lt;b&gt;Log Analytics&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#d5e8d4;strokeColor=#82b366;fontColor=#1e3a1e;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1490" y="80" width="210" height="730" as="geometry" />
        </mxCell>
        <mxCell id="_ico8" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.law">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_m9" value="1. open application" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.1260;exitDx=0;exitDy=0;entryX=0.5;entryY=0.1260;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.emp" target="n.app">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m10" value="2. 302 /authorize — OIDC + PKCE" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.1808;exitDx=0;exitDy=0;entryX=0.5;entryY=0.1808;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.app" target="n.entra">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m11" value="3. evaluate existing session (PRT)" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.2356;exitDx=0;exitDy=0;entryX=0.5;entryY=0.2685;entryDx=0;entryDy=0;align=left;spacingLeft=6;" edge="1" parent="1" source="n.entra" target="n.entra">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="720" y="250" />
              <mxPoint x="720" y="280" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_m12" value="4. evaluate policies: user, app, risk" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.3068;exitDx=0;exitDy=0;entryX=0.5;entryY=0.3068;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.entra" target="n.ca">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m13" value="5. device compliance state" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.3616;exitDx=0;exitDy=0;entryX=0.5;entryY=0.3616;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.ca" target="n.dev">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m14" value="6. compliant, Entra-joined" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.4164;exitDx=0;exitDy=0;entryX=0.5;entryY=0.4164;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.dev" target="n.ca">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m15" value="7. grant: phishing-resistant MFA" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.4712;exitDx=0;exitDy=0;entryX=0.5;entryY=0.4712;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.ca" target="n.entra">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m16" value="8. WebAuthn challenge" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.5260;exitDx=0;exitDy=0;entryX=0.5;entryY=0.5260;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.entra" target="n.key">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m17" value="9. signed assertion" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.5808;exitDx=0;exitDy=0;entryX=0.5;entryY=0.5808;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.key" target="n.entra">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m18" value="10. authorization code" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.6356;exitDx=0;exitDy=0;entryX=0.5;entryY=0.6356;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.entra" target="n.app">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m19" value="11. code + verifier -&gt; /token" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.6904;exitDx=0;exitDy=0;entryX=0.5;entryY=0.6904;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.app" target="n.entra">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m20" value="12. id_token + access_token (CAE)" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.7452;exitDx=0;exitDy=0;entryX=0.5;entryY=0.7452;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.entra" target="n.app">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m21" value="13. session established" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.8000;exitDx=0;exitDy=0;entryX=0.5;entryY=0.8000;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.app" target="n.emp">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m22" value="14. sign-in log + CA result" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#d79b00;exitX=0.5;exitY=0.8548;exitDx=0;exitDy=0;entryX=0.5;entryY=0.8548;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.entra" target="n.law">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m23" value="15. CAE event: session revoked" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;dashed=1;strokeColor=#b85450;fontColor=#b85450;exitX=0.5;exitY=0.9096;exitDx=0;exitDy=0;entryX=0.5;entryY=0.9096;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.entra" target="n.app">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="title" value="Workforce SSO &amp; Conditional Access — one sign-in" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=20;fontStyle=1;fontColor=#16202c;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="20" width="1670" height="30" as="geometry" />
        </mxCell>
        <mxCell id="rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#c9d3de;" vertex="1" parent="1">
          <mxGeometry x="40" y="50" width="1670" height="10" as="geometry" />
        </mxCell>
        <mxCell id="note" value="Steps 8 and 9 are skipped when the session already meets the required authentication strength, which covers roughly 71% of sign-ins. Step 15 is the leaver path: revocation reaches CAE-aware resources in about a minute rather than waiting an hour for token expiry." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="860" width="1670" height="20" as="geometry" />
        </mxCell>
        <mxCell id="foot-rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#e3e9ef;" vertex="1" parent="1">
          <mxGeometry x="40" y="880" width="1670" height="10" as="geometry" />
        </mxCell>
        <mxCell id="foot" value="v 1.0   ·   owner Data &amp; AI Global Practice   ·   date 2026-08" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=9;fontColor=#9aa7b4;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="890" width="1670" height="10" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
