Microsoft will change how Conditional Access policies are enforced in Microsoft Entra starting March 27, 2026, with a phased rollout continuing through June 2026. The change affects sign-ins through client applications that request only OIDC scopes or a limited set of directory scopes when Conditional Access policies target all resources and include resource exclusions. After the change, these policies will be enforced during sign-in even when resource exclusions are present. “When a user signs in … Continue reading Conditional Access enforcement change coming to Microsoft Entra