So authentication flows just dropped in my lab tenant @_dirkjan Can confirm. This is a powerful way to stop token theft via device codes. Will need to play around with it a bit more. If I go to the same resource without initiating a device code request then login functionality continues to flow normally. This is great because it doesn't require a conditional access stack such as requiring device compliance. cc: @ItsReallyNick