policy

Conditional Access enforcement changes May 13: check your exceptions now

Apps could bypass Conditional Access by requesting minimal sign-in scopes. Non-excluded apps slipped through silently for years. Starting May 13, that stops.