Microsoft-managed Conditional Access policies
Observed content change
8 removed passages (about 50 words). The changed wording mentions prerequisites. Review the source to confirm the effect.
May need admin actionCheck whether new requirements apply to your setup.
[removed: Note]
[removed: Access to this page requires authorization. You can try signing in or changing directories.]
[removed: Access to this page requires authorization. You can try changing directories.]
[removed: Was this page helpful?]
[removed: Need help with this topic?]
[removed: Want to try using Ask Learn to clarify or guide you through this topic?]
Microsoft's wording from Microsoft source, © Microsoft Corporation, under MIT. ChangeIntel marks removed and added words, drops formatting and shortens long unchanged stretches.
Read the current Microsoft source · Link to this observation · Compare any two versions
Sections to inspect
- Microsoft-managed Conditional Access policies
- Feedback
- Additional resources
Up to 12 section headings from retained before/after evidence. The current source may have changed again.
Why this was flagged
The changed words, with a few words around them, matched these rule categories: prerequisites. These matches identify subjects to assess; they do not establish a policy change or applicability.
Observation details · observed 12 Oct 19:50 UTC
- Observed by ChangeIntel
- 12 Oct 19:50 UTC
- Source update metadata
- 8 Aug 07:42 UTC
- First observed on this installation
- 5 Oct 17:50 UTC
- Last successful check
- today 01:31 UTC
- Next check due
- today 07:31 UTC
Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.
Watch this page to review its changes in My radar.
Timeline
From the capture of 12 Oct 19:50 UTC- 20 undated sections
- 25 with conditions
- 84 recorded changes
Requirements, exceptions and scope
Microsoft Entra ID P2 or Microsoft 365 Business Premium licenses is required to use Conditional Access features…
The Conditional Access Administrator role is the least…
- Multifactor authentication for admins accessing Microsoft Admin portalsRequirementScope1 condition2 passages
- Multifactor authentication and reauthentication for risky sign-insRequirementException2 conditions2 passages
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
How this timeline changed
Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.
72 earlier changes
-
No longer on the page Require multifactor authentication for Azure managementin Upgrade from security defaultsMicrosoft's source, commit 3fce2e2
-
No longer on the page Require multifactor authentication for all usersin Upgrade from security defaultsMicrosoft's source, commit 3fce2e2
-
No longer on the page Require multifactor authentication for adminsin Upgrade from security defaultsMicrosoft's source, commit 3fce2e2
-
-
No longer on the page Require multifactor authentication for adminsMicrosoft's source, commit a454cd9
-
No longer on the page Require multifactor authentication for all usersMicrosoft's source, commit a454cd9
-
Requirement added Require multifactor authentication for Azure managementin Upgrade from security defaultsMicrosoft's source, commit a454cd9
-
Requirement added Require multifactor authentication for all usersin Upgrade from security defaultsMicrosoft's source, commit a454cd9
-
Requirement added Require multifactor authentication for adminsin Upgrade from security defaultsMicrosoft's source, commit a454cd9
-
No longer on the page Require multifactor authentication for adminsMicrosoft's source, commit a454cd9
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page How to access and manage Microsoft-managed policiesMicrosoft's source, commit 8e7e08e
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
No longer on the page How to access and manage Microsoft-managed policiesMicrosoft's source, commit b29c07b
-
-
-
-
No longer on the page Require multifactor authentication for Azure managementin Upgrade from security defaultsMicrosoft's source, commit b29c07b
-
No longer on the page Require multifactor authentication for all usersin Upgrade from security defaultsMicrosoft's source, commit b29c07b
-
No longer on the page Require multifactor authentication for adminsin Upgrade from security defaultsMicrosoft's source, commit b29c07b
Observed history and review priority
Captured 12 Oct 19:50 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.
Review priority. Previously extracted guidance is missing from a later capture · Extracted assertions require review · Applicability or exceptions require review
0 date changes and 0 condition changes across 1 compared revisions. Suggested check interval: 6 hours.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 22
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 12 Oct 19:50 UTC · 36 candidates
- 6 Oct 17:57 UTC · 38 candidates
- 5 Oct 17:50 UTC · 38 candidates
- 7 Aug 22:35 UTC · 35 candidates
- 29 Jul 01:30 UTC · 35 candidates
- 29 Jul 00:26 UTC · 35 candidates
- 29 Jul 00:17 UTC · 35 candidates
- 17 Jun 19:33 UTC · 32 candidates
- 17 Jun 19:27 UTC · 32 candidates
- 28 May 20:14 UTC · 31 candidates
- 20 May 18:19 UTC · 30 candidates
- 6 Apr 15:12 UTC · 31 candidates
- 25 Mar 19:20 UTC · 31 candidates
- 25 Mar 16:42 UTC · 31 candidates
- 25 Mar 00:50 UTC · 27 candidates
- 23 Mar 17:46 UTC · 27 candidates
- 19 Mar 17:58 UTC · 31 candidates
- 19 Mar 17:48 UTC · 31 candidates
- 18 Mar 23:20 UTC · 27 candidates
- 18 Mar 20:03 UTC · 29 candidates
- 18 Mar 16:53 UTC · 29 candidates
- 18 Mar 16:44 UTC · 29 candidates
Microsoft's edits
History on GitHubCommits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read 19 Oct 23:40 UTC.
Related public evidence
- Official documentation · 13 Oct 2026Conditional Access target resources
- Official documentation · 13 Oct 2026Conditional Access token protection
- Official documentation · 12 Oct 2026Conditional Access session controls
- Official documentation · 12 Oct 2026Authentication strengths
- Official documentation · 12 Oct 2026Conditional Access conditions
- Official documentation · 12 Oct 2026Conditional Access authentication strengths for guests
Retained observations
- 12 Oct 19:50 UTC · shown above
- 6 Oct 17:57 UTC
Source metadata changed; retained article content is unchanged.
- 5 Oct 17:50 UTC
Baseline for retained history; no earlier retained text to compare.
What changed
First observed 18 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.