| Announcement ID | MC540749 | Published Date | 04-13-2023 | |
| Service | Intune | Last Updated | 04-13-2023 | |
| Category | Plan for change | Expiration Date | 03-31-2026 | |
| Roadmap ID | Action Required by Date | |||
| Tags | Admin impact, Retirement | |||
| Summary |
|---|
| MC540749: "Require approved client app" control in Azure AD Conditional Access will be retired in March 2026 |
| More Information |
|---|
In March 2026, Azure Active Directory (Azure AD) and Microsoft Intune will retire the Conditional Access Require approved client app grant control. Instead we recommend utilizing the "Require application protection policy" grant control, which provides the same data loss and protection with additional benefits. How this will affect your organization: If you have a Conditional Access policy with "Require approved client app" grant control configured, after this change, you will no longer be able to enforce this control, it will be as if this grant is not selected. What you need to do to prepare: We recommend updating your Conditional Access policy to using the "Require application protection policy" grant control. |