Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

Conditional Access session controls

This page's changes and edits · All guidance changes

Microsoft's edit ·

CA session control in external tenants.

Microsoft's commit message in MicrosoftDocs/entra-docs · commit cd0c2be · +6 −1 lines · also on GitHub

⋯ 3 unchanged lines
44
55 ms.service: entra-id
66 ms.subservice: conditional-access
7 −ms.topic: concept-article
7 +ms.topic: article
88 ms.date: 09/23/2025
99
1010 ms.author: joflore
⋯ 6 unchanged lines
1717 In a Conditional Access policy, an admin can use session controls to enable limited experiences in specific cloud applications.
1818
1919 ![Screenshot of a Conditional Access policy with a grant control requiring multifactor authentication.](./media/concept-conditional-access-session/conditional-access-session.png)
20 +
21 +In a Microsoft Entra External ID [external tenant](/entra/external-id/customers/concept-supported-features-customers#conditional-access), you can use the following session controls:
22 +
23 +- Sign-in frequency
24 +- Persistent browser session
2025
2126 ## Application enforced restrictions
2227
⋯ 68 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 07:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current