Conditional Access target resources

Source history: extracted from the page's source file at a commit; shared includes are not expanded

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

• New-MgServicePrincipal

Requirements, exceptions and scope

• OverviewScope1 passage
• Microsoft cloud applicationsException2 conditions1 passage
• Windows Azure Service Management APIRequirementScopeRecommendation3 passages
• Other applicationsExceptionScope2 conditions2 passages
  New-MgServicePrincipal
• Conditional Access for different client typesExceptionScope2 conditions2 passages
• Conditional Access for ALL resourcesScope1 passage
• Legacy Conditional Access behavior when an ALL resources policy has a resource exclusionRequirementScope4 conditions3 passages
• New Conditional Access behavior when an ALL resources policy has a resource exclusionException3 conditions1 passage
• Protect directory informationRequirementExceptionScopeRecommendationTentative2 conditions4 passages
• User actionsRequirementExceptionTentative4 conditions2 passages
• Authentication contextRequirement1 passage
• Configure authentication contextsException1 condition1 passage
• Add to Conditional Access policyScope1 passage

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

1. 27 May 2026
   No longer on the page How to identify applications affected by the low-privilege scope enforcement changeMicrosoft's source, commit a7f838a
2. 27 May 2026
   No longer on the page PowerShellMicrosoft's source, commit a7f838a
3. 27 May 2026
   No longer on the page User experienceMicrosoft's source, commit a7f838a
4. 27 May 2026
   Requirement added Legacy Conditional Access behavior when an ALL resources policy has a resource exclusionMicrosoft's source, commit a7f838a
5. 27 May 2026
   No longer on the page Legacy Conditional Access behavior when an ALL resources policy has a resource exclusionMicrosoft's source, commit a7f838a
6. 7 Apr 2026
   No longer on the page Add to Conditional Access policyMicrosoft's source, commit 55a3fc4
7. 7 Apr 2026
   Scope added Add to Conditional Access policyMicrosoft's source, commit 55a3fc4
8. 25 Mar 2026
   No longer on the page Conditional Access: Target resourcesMicrosoft's source, commit 0593e51
9. 25 Mar 2026
   Scope added OverviewMicrosoft's source, commit 0593e51
10. 23 Mar 2026
    Exception added Protect directory informationMicrosoft's source, commit c01ed57
11. 23 Mar 2026
    No longer on the page Protecting directory informationMicrosoft's source, commit c01ed57
12. 23 Mar 2026
    No longer on the page Configure authentication contextsMicrosoft's source, commit c01ed57