Public mode

No tenant, Graph, or device access. Every item links to its source. What this means

Some sources or documents need attention: 253/255 feeds/APIs · 300/444 docs · checked 00:21 UTC Customize Public modeDiscuss ChangeIntel on Discord

Conditional Access token protection

Timelines and exceptions · All guidance changes

Entra · Official Microsoft guidanceObserved changes retained

Observed content change

8 removed passages (about 50 words). The changed wording mentions prerequisites. Review the source to confirm the effect.

May need admin actionCheck whether new requirements apply to your setup.

Requirement wording
RemovedToken Protection in Microsoft Entra Conditional Access
[removed: Note]
RemovedToken Protection in Microsoft Entra Conditional Access
[removed: Access to this page requires authorization. You can try signing in or changing directories.]
RemovedToken Protection in Microsoft Entra Conditional Access
[removed: Access to this page requires authorization. You can try changing directories.]
RemovedFeedback
[removed: Was this page helpful?]
RemovedFeedback
[removed: Need help with this topic?]
RemovedFeedback
[removed: Want to try using Ask Learn to clarify or guide you through this topic?]

Microsoft's wording from Microsoft source, © Microsoft Corporation, under MIT. ChangeIntel marks removed and added words, drops formatting and shortens long unchanged stretches.

Read the current Microsoft source · Link to this observation · Compare any two versions

Sections to inspect

Up to 12 section headings from retained before/after evidence. The current source may have changed again.

Why this was flagged

The changed words, with a few words around them, matched these rule categories: prerequisites. These matches identify subjects to assess; they do not establish a policy change or applicability.

Observation details · observed 13 Oct 00:55 UTC
Observed by ChangeIntel
13 Oct 00:55 UTC
Source update metadata
20 Aug 17:35 UTC
First observed on this installation
5 Oct 23:18 UTC
Last successful check
today 00:38 UTC
Next check due
20 Oct 00:38 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

Watch this page to review its changes in My radar.

Timeline

From the capture of 13 Oct 00:55 UTC
  • 4 undated sections
  • 6 with conditions

Requirements, exceptions and scope

  • OverviewException4 conditions2 passages
    Token Protection is a Conditional Access session control that attempts to reduce token replay attacks by ensuring only device bound sign-in session tokens, like Primary…
  • Supported resourcesException1 condition1 passage
  • Supported devicesRequirementException4 conditions2 passages
  • DeploymentException1 condition1 passage

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

Observed history and review priority

Captured 13 Oct 00:55 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.

Review priority. Extracted assertions require review · Applicability or exceptions require review

0 date changes and 0 condition changes across 0 compared revisions. Suggested check interval: 24 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 2

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read 18 Oct 23:50 UTC.

  1. Update Apple token protection guidance for GA Served on LearnView diff
  2. Remove image reference from token protection doc View diff
  3. Document Token Protection support for web apps View diff
  4. Add Token Protection deployment guide for web apps (Preview) (#14034) View diff
  5. AI readiness: add Overview heading to CA articles (batch 2) View diff
  6. PR-review-fixes View diff
  7. final-edits View diff
  8. pm-review View diff
  9. fix View diff
  10. merge-fix View diff
  11. Merge branch 'main' into ca-token-protection-022426 View diff
  12. PR-review-fixes View diff
  13. Fix KQL bugs in Token Protection article View diff
  14. link-fixes View diff
  15. PM-updates-TOC View diff
  16. finish-windows View diff
  17. updates View diff
  18. add-windows-guide View diff
2 metadata-only edits · author, dates or topic labels, no article text
  1. Content freshness review: Conditional Access (65 articles verified, 1 fix) Metadata onlyView diff
  2. nudge Metadata onlyView diff

Retained observations

  • 13 Oct 00:55 UTC · shown above
  • 5 Oct 23:18 UTC

    Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026

No field changes in the recorded history.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 19 Oct 00:21 UTC · 253 of 255 readable · 252 fully read · documentation 300/444 current