Full web support for conditional access policies across Azure DevOps and partner web properties
Feb 4, 2025Angel Wong
Summary
This post announces the integration of Microsoft Entra tokens for web sessions across Azure DevOps services and partner web properties, replacing previous cookie-based authentication. This enables hourly evaluation of conditional access policies, including device compliance, which was not previously supported with the same frequency. Non-interactive flows (e.g., REST API with PATs) will continue to rely on IP-fencing policies.
More from the Azure DevOps Service Connection with Microsoft Entra trail
- You can now use the Azure DevOps Service Connection instead of a PAT or Build Session token
- Retirement of Azure DevOps issuer in Workload identity federation service connections
- Optimizing Git policy management at scale
- Azure DevOps MCP Server April Update
- One-click security scanning and org-wide alert triage come to Advanced Security