MSAL

Microsoft Is Closing a Conditional Access Loophole on March 27

Starting March 27, 2026, Microsoft Entra ID will begin enforcing Conditional Access policies against sign-ins that have been silently bypassing them for years. If your tenant has CA policies targeting all resources with exclusions, apps like Azure CLI and custom tools will break. Here is what is changing, who is affected, and what to do before the deadline.