Skip to content
← Back to the guide

Continuous Access Evaluation explained

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 4

Continuous Access Evaluation explained

How CAE revokes access tokens in near real time when risk signals change — and what to do to make sure it works.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/continuous-access-evaluation-explained

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 4
01

What is Continuous Access Evaluation in Entra ID?

CAE is a mechanism where Exchange Online, SharePoint Online, Teams, and Microsoft Graph subscribe to critical events from Entra — user disabled, password changed, sessions revoked, high risk detected, IP outside a named…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/continuous-access-evaluation-explained

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 4
02

Does Continuous Access Evaluation work for all apps?

No. Only CAE-capable services and clients participate: the core Microsoft 365 workloads and Microsoft Graph, with clients such as Outlook, Teams, and the Office apps. Third-party apps and older clients keep the traditio…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/continuous-access-evaluation-explained

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 4
03

How quickly does revoking sessions take effect with CAE?

For CAE-enabled services, typically within a few minutes of the revocation, disablement, or password change. Without CAE, an access token stays valid until it expires — usually one hour — which is why older guidance sai…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/continuous-access-evaluation-explained

Slide 4Download PNG

Auto-generated from Continuous Access Evaluation explained. This page is not indexed and isn't part of the guide itself.