Define/Discuss: Signals

[jischr]

topics to cover:

• Receive Signals about:
  • Posture or Integrity Changes
    • receive real-time signals about changes in account posture or integrity
  • Device Posture or Integrity Changes
    • receive real-time signals about changes in the device posture or integrity (e.g. from device management services, EDR, etc.)

[joninusa]

Add Location change notification which can include the real client IP address

[dhs-BI]

@joninusa this may also include GPS coordinates on managed devices. I think we can generalize the statement to include network and physical location signals.

[aaronpk]

Moving these over from #24:

• Receive Notifications of Revoked Tokens
  • be notified when tokens have been revoked
• Receive Notifications of Invalidated Sessions
  • be notified when sessions have been invalidated

Now I see why these used the term "notification" rather than "signal", because these refer to a very specific event triggering a very specific message. Whereas "receive real-time signals about changes in account posture" describes potentially many different things. In any case, I don't think this particular language detail is super important at the moment, just that these token/session events get talked about in the same bucket as other kinds of signals.