Microsoft 365 Message Center item MC1269791
MC1269791 - Microsoft Entra: We will create new Microsoft-managed Conditional Access policies in your tenant
- Message Center ID
- MC1269791
- Category
- plan For Change
- Severity
- normal
- Services
- Microsoft Entra
- Tags
- Admin impact
- Published
- 2026-04-03
- Last updated
- 2026-04-03
- Expires
- 2026-07-07
We will create new Microsoft-managed Conditional Access policies in your tenant during the week of April 08, 2026Did you know that multifactor authentication reduces the risk of account takeover by over 99%? For MFA to be effective, you also need to block legacy authentication. Legacy authentication protocols like POP, SMTP, IMAP, and MAPI cant enforce MFA, making them a target for attackers. In 2023, as part of our Secure Future initiative, we introduced Microsoft-managed Conditional Access policies. We'll create new Conditional Access policies in your tenant during week of April 08, 2026.Block device code flowThese policies will be created in report-only mode, which means that they won't block any access, but will generate reports on how they will affect users when switched to the On state.After the policies have been created in your tenant, you'll be able to view them Microsoft Entra admin center or Azure portal and will have 30 days to evaluate and configure them. Then, if you haven't already moved them to the On or Off state, they will be automatically moved to On. Once these policies are enabled, any legacy authentications will be blocked.Recommended actionTo avoid any potential disruption to users' access and to ensure these policies meet your organization's needs, take the following actions within 30 days of their creation, before they're moved to the On state as we have configured:Review the effects and benefits of the new policies. If you don't want us to enable them automatically, set them to Off. You can set them to On at any time.Customize these policies according to your specific needs, such as excluding emergency access accounts. You can further customize these policies by duplicating them in the list view.Help and supportIf you have questions or need help, create a support request:For Issue type, select Technical.For Service type, select Microsoft Entra Sign-In and Multi Factor Authentication.For Summary, type a description of your issue.For Problem type, select Conditional Access.For Problem subtype, select Microsoft Managed.