You may have seen an email this week from #Microsoft advising that beginning on June 15th 2021 they will enable Continuous Access Evaluation on Premium Azure AD tenants by default. Your #MicrosoftCloudQuickFix today is that this is a GOOD thing and you will want this capability!
Continuous Access Evaluation will only be active in sessions betweenΒ clients and services that support it which for now are Exchange, Teams, and SharePoint Online. When enabled in your tenant critical events, such as disabling users and resetting passwords, and critical policies like location policy, will take effect within minutes!
You can disable this feature before June 15th 2021 if you don’t want to use it but the best example why you want this enabled is:
When a user is terminated and their mailbox is in Exchange Online they will still have access to their mailbox on their devices for some time after unless there are specific steps taken by the Exchange Admin because the access token on the device is still valid. Continuous Access Evaluation would notice that the user has be disabled and nearly synchronously disable the access by rejecting the token even though it is still valid.
More information for Continuous Access Evaluation can found on #Microsoft Docs.