Conditional Access token protection
Retained observation
Source metadata changed; retained article content is unchanged.
Read the current Microsoft source · Link to this observation · Compare any two versions
Observation details · observed 23 Oct 11:52 UTC
- Observed by ChangeIntel
- 23 Oct 11:52 UTC
- Source update metadata
- 20 Aug 17:35 UTC
- First observed on this installation
- 5 Oct 23:18 UTC
- Last successful check
- today 00:51 UTC
- Next check due
- today 06:51 UTC
Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.
Watch this page to review its changes in My radar.
Timeline
From the capture of 23 Oct 11:52 UTC- 4 undated sections
- 6 with conditions
- 93 recorded changes
Requirements, exceptions and scope
Token Protection is a Conditional Access session control that attempts to reduce token replay attacks by ensuring only device bound sign-in session tokens, like Primary…
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
How this timeline changed
Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.
-
-
-
-
-
No longer on the page Token Protection in Microsoft Entra Conditional AccessMicrosoft's source, commit 354aed4
-
No longer on the page Token Protection in Microsoft Entra Conditional AccessMicrosoft's source, commit 354aed4
-
-
-
-
-
No longer on the page Token Protection in Microsoft Entra Conditional AccessMicrosoft's source, commit 925715e
81 earlier changes
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
late June 2023 -
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
late June 2023
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page Token Protection in Microsoft Entra Conditional AccessMicrosoft's source, commit 92ea855
-
No longer on the page Token Protection in Microsoft Entra Conditional AccessMicrosoft's source, commit 92ea855
-
-
-
-
-
late June 2023 -
-
-
-
-
-
-
-
No longer on the page Token Protection in Microsoft Entra Conditional AccessMicrosoft's source, commit c527bab
-
No longer on the page Token Protection in Microsoft Entra Conditional AccessMicrosoft's source, commit c527bab
-
-
-
-
-
late June 2023
-
-
-
-
No longer on the page Token Protection in Microsoft Entra Conditional AccessMicrosoft's source, commit f646b47
-
Observed history and review priority
Captured 23 Oct 11:52 UTC; extracted 23 Oct 11:52 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.
Review priority. Extracted assertions require review · Applicability or exceptions require review
0 date changes and 0 condition changes across 1 compared revisions. Suggested check interval: 6 hours.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 21
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 23 Oct 11:52 UTC · 8 candidates
- 13 Oct 00:55 UTC · 8 candidates
- 5 Oct 23:18 UTC · 8 candidates
- 14 Aug 19:03 UTC · 8 candidates
- 10 Aug 17:07 UTC · 8 candidates
- 10 Aug 16:38 UTC · 8 candidates
- 6 Aug 23:12 UTC · 8 candidates
- 25 Mar 00:50 UTC · 8 candidates
- 5 Mar 21:48 UTC · 8 candidates
- 5 Mar 19:48 UTC · 8 candidates
- 4 Mar 23:51 UTC · 8 candidates
- 3 Mar 23:35 UTC · 8 candidates
- 3 Mar 21:42 UTC · 21 candidates
- 3 Mar 21:35 UTC · 21 candidates
- 3 Mar 21:34 UTC · 8 candidates
- 3 Mar 20:54 UTC · 17 candidates
- 2 Mar 22:17 UTC · 8 candidates
- 26 Feb 22:42 UTC · 8 candidates
- 25 Feb 20:22 UTC · 9 candidates
- 25 Feb 18:55 UTC · 9 candidates
- 25 Feb 18:14 UTC · 9 candidates
Microsoft's edits
History on GitHubCommits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read today 00:51 UTC.
Related public evidence
- Community source · 24 Oct 2026Conditional Access Gaps and the App Back Door, with Brandon Colley
- Official documentation · 13 Oct 2026Conditional Access target resources
- Official documentation · 12 Oct 2026Conditional Access session controls
- Official documentation · 12 Oct 2026Authentication strengths
- Official documentation · 12 Oct 2026Conditional Access conditions
- Official documentation · 12 Oct 2026Conditional Access authentication strengths for guests
Retained observations
- 23 Oct 11:52 UTC · shown above
- 13 Oct 00:55 UTC
The page title or its body outside the tracked passages changed. Review the source for its effect.
- 5 Oct 23:18 UTC
Baseline for retained history; no earlier retained text to compare.
What changed
First observed 18 Oct 2026No field changes are shown for this selection.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.