Entra ID CAE covers far fewer Microsoft 365 sign-ins than expected

Microsoft’s Continuous Access Evaluation (CAE) can revoke access before a normal one-hour token expires, but its protection is far from universal across Microsoft 365. An analysis of 740 first-party resource tokens found that only 33 included the CAE claim, while some Microsoft clients still request ordinary tokens even when connecting to CAE-capable services.
Source

👉@sysadminoff

https://4sysops.com/archives/entra-id-cae-covers-far-fewer-microsoft-365-sign-ins-than-expected/