Continuous access evaluation
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 737eb1a · +1 −2 lines · also on GitHub
⋯ 141 unchanged lines
142142
143143
If you're sending traffic to non-Microsoft 365 resources through Global Secure Access, resource providers aren't aware of the source IP address of the user as [source IP restoration](../../global-secure-access/how-to-source-ip-restoration.md) isn’t currently supported for these resources. In this case, if the user is in the trusted IP location (as seen by Microsoft Entra), Microsoft Entra issues a one-hour token that suspends IP address checks at the resource until token expiration. Microsoft Entra continues to enforce IP address checks correctly for these resources.
144144
145
−- **Standard location enforcement mode**: The granting of access under this exception (that is, an allowed location detected between Microsoft Entra with a disallowed location detected by the resource provider) protects user productivity by maintaining access to critical resources.
146
−- **Strict location enforcement mode**: Administrators who operate under stable network topologies and wish remove the standard mode exception can use [Strict Location Enforcement (Public Preview)](concept-continuous-access-evaluation-strict-enforcement.md).
145
+Standard vs. Strict mode. The granting of access under this exception (that is, an allowed location detected between Microsoft Entra ID with a disallowed location detected by the resource provider) protects user productivity by maintaining access to critical resources. This is standard location enforcement. On the other hand, Administrators who operate under stable network topologies and wish remove this exception can use [Strict Location Enforcement (Public Preview)](concept-continuous-access-evaluation-strict-enforcement.md).
147146
148147
## Enable or disable CAE
149148
⋯ 113 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 23:06 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.