Assertion: azure ad | /r/CapableOf | provide the dpapi key
Facets:
Source sentences:
text: When the device needs to decrypt the user profile with the DPAPI key, Azure AD provides the DPAPI key encrypted by the session key, which CloudAP plugin requests TPM to decrypt.