Continuously verify user and device identity during sessions rather than a one-time login check.