Power Platform – New Continuous Access Evaluation (CAE) announcement

🚨 The Signal: Continuous Access Evaluation (CAE) is now generally available and enabled by default for Dataverse user sign-ins. This enhances security by enforcing near real-time session policy evaluation, reducing stale sessions and unauthorized access risks.

The Impact

All Dataverse users are affected, with a positive security risk reduction due to enhanced session control.

  • Security Teams: Reduced risk from compromised sessions due to real-time policy enforcement.
  • Admins: Need to validate Conditional Access policies to prevent unintended access disruptions.
  • End Users: May experience more frequent re-authentication if policies are not aligned, but gain enhanced session security.

The Action

  1. Review existing Microsoft Entra Conditional Access policies targeting Dataverse or Power Platform to ensure they align with business and security requirements.
  2. Test Conditional Access policies in a non-production environment (e.g., GCC Early Release) to validate expected user experience and access outcomes.
  3. Ensure policies are configured to handle session termination gracefully, informing users of re-authentication requirements.
  4. Communicate potential changes in sign-in experience to Dataverse users, especially regarding session termination and re-authentication.

Domain: Entra · Impact: medium · Workload: Entra ID · Essential Eight: Multi-Factor Authentication · ISM: ISM-0109, ISM-0123, ISM-0140, ISM-0974, ISM-1173, ISM-1228, ISM-1401, ISM-1504, ISM-1505, ISM-1679, ISM-1680, ISM-1681, ISM-1682, ISM-1683, ISM-1815, ISM-1819, ISM-1872, ISM-1873, ISM-1874, ISM-1892, ISM-1893, ISM-1894, ISM-1906, ISM-1907