Real-Time Security with Continuous Access Evaluation (CAE) comes to Azure DevOps
Aug 12, 2025Angel Wong
Summary
Introduced Continuous Access Evaluation (CAE) support for Azure DevOps, enabling near real-time security enforcement by integrating with Microsoft Entra ID. This allows for rapid revocation of access based on critical security events. The post details the technical mechanism of CAE, its impact on user sessions, considerations for VPN configurations and IP address variability, and the necessary handling of claims challenges for developers using the .NET client library.
More from the Azure DevOps Service Connection with Microsoft Entra trail
- You can now use the Azure DevOps Service Connection instead of a PAT or Build Session token
- Retirement of Azure DevOps issuer in Workload identity federation service connections
- Optimizing Git policy management at scale
- Azure DevOps MCP Server April Update
- One-click security scanning and org-wide alert triage come to Advanced Security