Phased Rollout with the Conditional Access Agent
You can now use the Conditional Access Optimization Agent to safely roll out _any_ report‑only Conditional Access policy in phases. When you initiate the process, the agent analyzes sign‑in data to recommend a low‑risk, staged deployment plan, starting with smaller user groups and gradually expanding, so you can turn policies on with confidence and minimize user impact. For more information, see: Conditional Access Optimization Agent phased rollout.
Terms in this update
This is in the weekly digest for week 40 · What changed this week? →
More Entra updates
Extended Conditional Access protections for Agent's user accounts
Passkey Adoption Campaigns with the Conditional Access Optimization Agent
Improved enforcement for All resources policies with resource exclusions
Session Control Conditional Access Policies in Entra External ID
BYOD support for Windows client using Entra registration
Domainless SAML IdP federation for workforce tenants
Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.
