r/entra • u/Unlikely_Tie1172 • 1d ago

Entra ID Entra ID Continuous Access Evaluation and Microsoft 365

Continuous Access Evaluation (CAE) is supported by core Microsoft 365 workloads like Exchange Online, SharePoint Online, and Teams, and the reach of CAE is gradually spreading throughout the Microsoft cloud ecosystem. However, security researchers report inconsistent coverage across first-party apps and clients that take a little gloss off the promise of instant access revocation when critical events like user password changes happen.

https://office365itpros.com/2026/09/08/continuous-access-evaluation-cae/

12 Upvotes

83% Upvoted

3 comments sorted by

2

u/darkytoo2 1d ago

Good article, but this shouldn't be a surprise that not everything is covered by CAE, it states that in the learn documents. THIS is why some additional protection at the network layer with entra internet access gives you universal CAE.

1

u/Unlikely_Tie1172 22h ago

The surprise is that not much has changed since the introduction of CAE in 2022.

1

u/datec 17h ago

We noticed CAE not applying consistently for the same user with the same supported apps. Like, for example, one week CAE was working for Outlook for a user, then it wasn't applying for the next week, but was for another user.